last executing test programs: 46m29.120999006s ago: executing program 32 (id=553): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100e3"], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48a, 0x0, 0x10004}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08000000008490783fffffffac1414aa00"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d58838000391000000"], 0xfd6c) 38m14.025806375s ago: executing program 33 (id=2807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0xd9a, 0xa009}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x8) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 64) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='o', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}, 0xd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000340)="88", 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7}, 0x8) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000e1c6935c000007000000090001000b0000000000000014000000090a010400000800000000000709000214000000100001000000000000000a0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) (async, rerun: 32) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 64) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) (rerun: 64) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) socket$kcm(0x2, 0x2, 0x0) 31m22.689330692s ago: executing program 3 (id=4785): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xad, &(0x7f0000000140)=""/173, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) mount(&(0x7f0000000ac0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000006c0)='tracefs\x00', 0x2000000, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f2b, 0x5, 0x10000, 0x4, 0x5, 0x8, 0x8, 0x3, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001658, 0xb, 0xe69, 0x3c, 0x1, 0x6, 0xfffffffe, 0xfffffff8]}) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000d40)=""/21, &(0x7f0000000280)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) syz_pidfd_open(0x0, 0x0) 31m21.049439751s ago: executing program 3 (id=4791): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x40) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x800400, &(0x7f0000000100)=ANY=[@ANYBLOB='usrquota,usrqu\b\x00\x00\x00block_hardlimit']) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a00000409000100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'dvmrp1\x00'}}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x59c, 0x0, 0x43c, 0x0, 0x0, 0x16c, 0x504, 0x504, 0x504, 0x504, 0x504, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xf4, 0x13c, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff}, {}, 0x300}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 31m20.114997825s ago: executing program 3 (id=4795): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006cc0)=@newtfilter={0x238, 0x2c, 0x200, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20c, 0x2, [@TCA_BPF_NAME={0x205, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x840) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4004) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7331, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, 0x0, &(0x7f0000000180)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r3, r7, 0x0) write$sndseq(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, 0x0, 0x0) listen(r8, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r9 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005"], 0x0) syz_usb_disconnect(r9) 31m16.815234736s ago: executing program 3 (id=4811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x64, 0x6, 0x53c, 0x0, 0x190, 0x258, 0x258, 0x258, 0x474, 0x474, 0x474, 0x474, 0x474, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@ipv6={@private1, @private2, [0xffffff00, 0xff], [0x0, 0x0, 0x0, 0x3000000], 'tunl0\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [], [], 'rose0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x11, 0x1, 0x3, 0x2e}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xffffff00], 'gre0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x2f, 0x8, 0x0, 0x20}, 0x0, 0xec, 0x130, 0x0, {}, [@common=@icmp6={{0x24}, {0xe, "066b", 0x1}}, @inet=@rpfilter={{0x24}, {0xc}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@local, 0x35, 0x36, 0x8}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x80008}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x598) 31m16.761936534s ago: executing program 3 (id=4812): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x440002, 0x0, 0x2}, 0x18) readlinkat(r2, &(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000240)=""/183, 0xb7) 31m16.508132596s ago: executing program 3 (id=4813): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x366, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x7d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) socket(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x45, 0x2}, 0x6, 0x5, 0x0, 0x0, 0x5, 0x3, 0x3ff}) shmctl$IPC_RMID(0x0, 0x0) 31m1.380408034s ago: executing program 34 (id=4813): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x366, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x7d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) socket(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x45, 0x2}, 0x6, 0x5, 0x0, 0x0, 0x5, 0x3, 0x3ff}) shmctl$IPC_RMID(0x0, 0x0) 28m32.124430248s ago: executing program 5 (id=5518): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x20000840) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x3) (async) r2 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x15, 0x80005, 0x0) getsockopt(r5, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f00000005c0)=0x84) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x401003}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) statx(r0, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 28m32.124284033s ago: executing program 5 (id=5519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x70bd25, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x28a1}]}}}]}, 0x40}, 0x1, 0xff7f0000}, 0x20000000) 28m31.997785695s ago: executing program 5 (id=5520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="70000000100001002dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8123010000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010007000000ed0c00008100060088a8000014"], 0x70}}, 0x4040000) 28m31.934544819s ago: executing program 5 (id=5521): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) mq_open(&(0x7f0000000280)='ns\xbf\x12\xe1(\x1fE\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80KA\x97\xb7.[e\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xbc\xbd&\xffq\xebA\x98\x96~\x17\xe3AK%\x10\xae\xcef\xf3\f\xc0\t\x88\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9', 0x40, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$tun(0xffffff9c, &(0x7f0000000240), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2) preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'team_slave_1\x00', 0x800}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x100) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r6 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x200, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0405048bc9000fb679939195ee979c0e80d3d978f3a86df6ffa0da8d24d140d3089cfff04c2be906afc91f9cc22820d64034d9fb72c94eabeeeee7ed000000000000a0afc8f608953d85f1b1983f19ac691ab652f70ddee759a05ab6bed0240fbcfd4e6a6c9aebd4e586986c9c"], 0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 28m31.837979831s ago: executing program 5 (id=5522): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 28m31.436030668s ago: executing program 5 (id=5527): syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(&(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x5, 0x402, 0x0, &(0x7f0000000140), 0x21000000) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 28m31.301158012s ago: executing program 35 (id=5527): syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(&(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x5, 0x402, 0x0, &(0x7f0000000140), 0x21000000) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 19m21.592057992s ago: executing program 4 (id=9591): socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/14], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x18}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0x22, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8000}, @ldst={0x1, 0x2, 0x4, 0x5, 0xd, 0xfffffffffffffffe, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) 19m19.584282035s ago: executing program 4 (id=9602): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)="f10ec5575fa16c2b000000005f", 0xd}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) recvmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408c0}}], 0x1, 0x4044045) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$caif_stream(0x25, 0x1, 0x1) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x80801, 0x0) ioctl$BLKTRACESTART(r3, 0x125f, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x1, 0x0, {0xffff, 0x1}, {0x47, 0x2}, @cond=[{0x5, 0x8, 0x209, 0xa5b4, 0x6, 0x2}, {0x4, 0x1c99, 0x7, 0x4, 0x2, 0xfffd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x67bf, 0x200c5fb, 0x5b, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 1', 0x16) socket(0xf, 0xa, 0x0) 19m18.380231874s ago: executing program 4 (id=9614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r6, 0x2) r7 = fcntl$getown(r5, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x3, 0x5004) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, &(0x7f0000000000), 0x10) 19m15.660886419s ago: executing program 4 (id=9633): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000880), 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x10, 0x803, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r7, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x8cc, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x89c, 0x2, [@TCA_BASIC_POLICE={0x898, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x598, 0x10000000, 0x3ff, 0x8, 0x0, {0x8, 0x3, 0x8, 0x67, 0x3a, 0x4}, {0x3, 0x2, 0x7, 0xffff, 0xd909, 0x4}, 0x25c7, 0x0, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xaffe, 0x4, 0x0, 0x5, 0x0, 0x10000, 0x6, 0x1b1, 0x3, 0x1, 0xffffffff, 0x703, 0x0, 0x9, 0x4, 0x0, 0xa, 0xa, 0x2, 0x100, 0x0, 0xfffff7cd, 0x4, 0x0, 0xb, 0x5, 0x4, 0xfffff2a1, 0x94, 0x7df, 0x8, 0xffff032f, 0x6, 0x7fff, 0x4b5, 0x81, 0x8000, 0x8, 0x6, 0x80000000, 0x5, 0xe, 0x8, 0x9, 0x80000001, 0x8001, 0x0, 0x5, 0x5, 0x0, 0x4, 0x9, 0x401, 0x540dcc9c, 0x2, 0xb, 0x3, 0x3d0, 0x4, 0xf4e, 0x0, 0x6, 0x9, 0x8, 0x9, 0xffff8000, 0x8, 0x5, 0x9, 0x60, 0x9, 0xff, 0x3, 0x5, 0xd, 0x5, 0x8001, 0x8, 0x40, 0x4, 0x800, 0x0, 0x4, 0xfffffe66, 0x10, 0x1, 0x1, 0x80000000, 0xfffffff9, 0x10000, 0x8, 0x8000, 0x8e, 0x5, 0x0, 0x5, 0x5, 0x7dfa, 0x4, 0x10000, 0x9, 0x0, 0xfffffffa, 0x9, 0xe00000, 0x9, 0x3, 0x2, 0x5, 0x4, 0x10001, 0x0, 0xfffffffc, 0x3e8, 0x5, 0x7, 0xabf, 0x4, 0x2, 0x7, 0x4, 0x2, 0x1, 0x5, 0x7, 0x3, 0x9, 0x401, 0x18ba, 0xd, 0x6, 0x100, 0x10, 0x6, 0xfffffffd, 0x3, 0x3, 0x1, 0x9, 0xfffff001, 0x2, 0x6, 0x1, 0x9, 0x7, 0x4, 0x8000, 0x5, 0x9, 0x6, 0xffffffff, 0x1, 0x81, 0x2, 0x1, 0x78c, 0x9, 0x8a, 0xdf, 0x3, 0x81, 0x200, 0x4, 0x10001, 0x8, 0x2, 0x3ff, 0x7fffffff, 0x9, 0xea7, 0x60, 0x5, 0x4, 0x2, 0x9a91, 0x7fffffff, 0x1ff, 0x7e, 0x7d, 0xa, 0xffffff76, 0x7, 0x8, 0xadb2, 0xf, 0x8ed4, 0x200, 0x5, 0x4, 0x7, 0x6, 0xa1a, 0x4, 0x10, 0x6, 0x80000000, 0x4, 0xfffffff1, 0x2, 0xe, 0xfff, 0x2, 0x1000, 0x3ff, 0x1, 0x0, 0x9, 0x6, 0x0, 0x2906cc45, 0x1000, 0xcf, 0x8, 0x6c0e, 0x40, 0x6ee434f7, 0x6, 0x1, 0xff, 0x9fa, 0xffffffff, 0xe, 0x1, 0x9, 0x9, 0x8, 0x4, 0x0, 0x9, 0xa53, 0x2, 0x10000, 0x5, 0xf, 0x200, 0x5, 0xd, 0xa, 0x0, 0x10001, 0xfff, 0x401, 0xd, 0x1, 0x7, 0x40, 0x7, 0x40, 0xfff, 0x80000001, 0x3, 0x401, 0x9ab, 0x800, 0xffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb9eb, 0x7, 0x200, 0x2cd155ae, 0x0, {0x7, 0x0, 0x10, 0xd, 0x4, 0xa}, {0x7, 0x2, 0x1, 0x30c2, 0x40, 0x6}, 0xd, 0x8000, 0x538}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x0, 0xfffffffd, 0x9, 0x4, 0x9a9, 0x8, 0x478, 0x401, 0x8000, 0x10, 0x3, 0x8001, 0x5, 0x9, 0x9, 0xc, 0x7fff, 0x1, 0x0, 0x8, 0x1, 0x2c, 0x5, 0x8, 0xd, 0x8, 0xffff, 0x80000000, 0x3ff, 0xff, 0x2d, 0x7fff, 0x7fffffff, 0x0, 0x3, 0xd7, 0xfff, 0x2, 0x72d, 0xfffffff7, 0x800, 0x7ff, 0x6, 0x9, 0x96b, 0x7ff, 0x81, 0x2, 0x395c, 0x7a77, 0x4, 0x1, 0xf, 0x7, 0x0, 0x1, 0x78, 0x0, 0xeb, 0xfc8c, 0x3, 0x9, 0x400, 0x8, 0x81, 0xfffffff7, 0x9, 0x0, 0xbcd, 0x9, 0xc366, 0xffff, 0x6, 0xc, 0x9, 0x5eb9, 0x2, 0x5, 0x2, 0x8, 0xc, 0x1, 0x4, 0x6, 0x3ff, 0x8, 0x3, 0x5, 0x800, 0x5, 0x8, 0x7, 0x5, 0x2, 0x5, 0x6, 0x4, 0x1f3, 0x7fffffff, 0x1, 0x3, 0x8, 0x0, 0xfffffffa, 0x5, 0x9858, 0xfff, 0x3, 0x3, 0x3, 0x4, 0x1, 0xfffff3f0, 0x1, 0x5, 0x6, 0x6, 0x6, 0xd, 0x5, 0x1, 0xfffffffc, 0x0, 0x4, 0x6, 0x8, 0x4, 0x2, 0xd4, 0x4, 0x3, 0xff, 0xffffffff, 0x6, 0x6bc6, 0x5, 0x800, 0xe, 0x2, 0x2, 0xa20, 0x0, 0x9, 0x7, 0x8, 0x323daaa, 0x3, 0x6, 0x4, 0x5, 0x4, 0x0, 0xffff, 0x1, 0x3, 0x1, 0x1, 0xffffff00, 0xe82b, 0x0, 0xffffffff, 0xe1df, 0x8, 0x627, 0x3, 0x7, 0x5, 0x10000, 0xa, 0x40, 0xcf4, 0x10, 0x0, 0x3, 0x6, 0x1c000000, 0x1f06, 0xef00, 0xecaf, 0x4, 0x9, 0x3, 0x5e6c027d, 0x80000000, 0x12000, 0x3, 0x80000000, 0x3826, 0x3, 0x8, 0xfffffff7, 0x1b7, 0x8001, 0x10001, 0x6, 0x4, 0x6, 0x5, 0x9, 0x4, 0xe4c, 0x80000001, 0x8c1, 0x70000, 0x401, 0x2, 0xa70, 0x2, 0x5, 0x0, 0x5, 0xf, 0xad, 0x8000000, 0x3, 0x4, 0x2, 0x8, 0xf, 0x8, 0x3, 0x81, 0x5, 0x9, 0x6, 0x0, 0x80000001, 0x2, 0x9, 0x2, 0x1b73, 0x0, 0x8, 0x3, 0x9, 0x1, 0x27dc, 0x5, 0x0, 0x2, 0x80000000, 0x3, 0x8, 0x7, 0x4, 0xffffd259, 0x40, 0x2, 0x2, 0x9, 0x3, 0x1, 0x3]}]}]}}]}, 0x8cc}}, 0x0) r9 = openat$nmem0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r9, 0x8044610a, &(0x7f00000003c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f0000000000)={0x4d, 0x20001000, 0x400, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_clone3(&(0x7f000000c340)={0xa002100, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(&(0x7f0000000100)='./file0\x00', 0x9) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x92088122}, 0xc, &(0x7f0000000380)={&(0x7f0000001540)={0x34c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5765276b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4031315f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d8e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5fb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}]}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbbf10a5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @loopback, 0x1000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000040ffffffffffffff120200258337cf0000436378a5eb91e20ff259d64383c473d094a3abc8e1fdae6081a890f65680fcb7724211f85e43fb259c276cab7f40afb09090d5edb8cd87d6ee6c2d831d2ffb81ace253af474b6e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r11}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x80010, r0, 0x0) 19m15.553029341s ago: executing program 4 (id=9635): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) getrusage(0x0, &(0x7f0000000340)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) socket$key(0xf, 0x3, 0x2) dup2(r1, r2) setuid(0xee01) utimensat(r2, 0x0, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0xc5000002) socket$nl_route(0x10, 0x3, 0x0) 19m15.194328641s ago: executing program 4 (id=9640): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000006028002002d1f", 0x2e}], 0x1}, 0x0) 19m15.112459309s ago: executing program 36 (id=9640): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000006028002002d1f", 0x2e}], 0x1}, 0x0) 18m20.812718727s ago: executing program 8 (id=9935): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, 0x0, 0x0) unshare(0x6e000000) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000002010200000000000000000a000002b08d482bdbd6b1fcdfbe8964513850c11bc4e51c43f7cbae7a6ca7791c6a87d77d4ce8bb41da5d944347db0899533dc773e018a679b2536c664350e4d6d23269"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r7, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0xfffffffd}, 0x10, 0xffffffffffffffff, r7, 0xc3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0xc94, 0x340, 0x25, 0x148, 0x340, 0x60, 0xc00, 0x2a8, 0x2a8, 0xc00, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x4, 0xd5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00', {0xffff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xa, 0x4, 0xec1, 'syz1\x00', {0xbdc}}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'gre0\x00'}, 0x0, 0x878, 0x8c0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3ff}, {0x59}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x8}, {0xffffffff, 0x3}, {0x77, 0x1}, {0x9, 0x2}, {0x1b91, 0x1}, {0xd76, 0x3}], [{0xe670, 0x5}, {0x9, 0x6}, {0x6, 0xb792}, {0x1, 0x7}, {0xf912, 0x4}, {0x7, 0x1}, {0x8c2b, 0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x4, 0x400}, {0xca, 0x9}], 0x2}, {[{0x4, 0x1}, {0x1}, {0x8, 0x2}, {0xa, 0x3}, {0x355, 0x3}, {0x3ff, 0x2}, {0x8}, {0xffffff34, 0x1}, {0x307d, 0x3}, {0x4}, {0x6b46, 0x3}], [{0x2, 0x5}, {0x2, 0x9}, {0xfffffffa, 0x88}, {0xfffff000, 0x175a}, {0x7, 0x200}, {0x8000}, {0x3ff}, {0x2, 0x6de89782}, {0x6, 0x519a}, {0x0, 0x8}, {0x7, 0x88}], 0x0, 0x7}, {[{0x0, 0x2}, {0x8f8}, {0x8, 0x3}, {0x2, 0x2}, {0x80000001, 0x1}, {0x2, 0x3}, {0x6}, {0x8001, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x2}], [{0x3fbe27c4, 0x9}, {0xdf, 0x7fff}, {0x8, 0x5}, {0x8, 0x7}, {0x3, 0x3}, {0xffff, 0x8}, {0x7, 0x6}, {0xffff, 0x8}, {0x4e24, 0x81}, {0x1, 0x84}, {0x101, 0x8}], 0xb, 0x5}, {[{0x2, 0x3}, {0x401, 0x1}, {0x40, 0x2}, {0x2, 0x2}, {0x80000000}, {0x2, 0x1}, {0xb, 0x3}, {0x8, 0x1}, {0x80, 0x1}, {0x5}, {0x8}], [{0xb, 0x7ff}, {0x1000, 0x1}, {0x9, 0xf}, {0x2, 0x8}, {0x2, 0x101}, {0x5, 0x7fff}, {0x7, 0x4}, {0x9, 0x4}, {0xfffff800, 0xffffff80}, {0x0, 0xfffffffe}, {0x5, 0x7}], 0x3, 0xa}, {[{0x8, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x9, 0x3}, {0x17c087d, 0x2}, {0x7fff, 0x3}, {0x80, 0x3}, {0x0, 0x3}, {0x40, 0x1}, {0x9, 0x2}], [{0x80000000, 0xfffffffc}, {0xfffffd00, 0x7}, {0x3, 0xc10}, {0xeb1d, 0x10001}, {0x8, 0x2}, {0xaf9c, 0x283}, {0x4, 0x2}, {0x7f, 0x9}, {0x400, 0x38000000}, {0x2, 0xb}, {0x2, 0x2}], 0xa, 0x1}, {[{0x535}, {0xffff, 0x3}, {0x3, 0x1}, {0xe}, {0x1, 0x2}, {0x7}, {0x4, 0x3}, {0x5}, {0x8, 0x3}, {0x37, 0x1}, {0x8}], [{0x4, 0x200}, {0x0, 0x9}, {0x4, 0x81}, {0xfffffc00, 0xfff}, {0x2, 0x1}, {0x3ff, 0x8}, {0x9, 0x6}, {0x40, 0x101}, {0xfffffffe, 0x7e05d4a7}, {0x0, 0x866}, {0x5, 0x6}], 0x1, 0x6}, {[{0x6, 0x2}, {0x3}, {0x401, 0x1}, {0x7fffffff, 0x1}, {0xff, 0x2}, {0x99e0}, {0x4}, {0x6}, {0x6417, 0x1}, {0x8}, {0x0, 0x1}], [{0x2, 0x1}, {0x8104, 0x9}, {0x9, 0xe}, {0x100, 0x9}, {0x9, 0x75}, {0xede, 0xff}, {0x3, 0x9f}, {0xfffffffe, 0x1}, {0x94, 0x5}, {0x4, 0x9}, {0x2, 0x9}], 0x2, 0x7}, {[{0x6}, {0x5, 0x3}, {0x3ff, 0x3}, {0x80, 0x2}, {0x6, 0x2}, {}, {0x18000, 0x2}, {0x2, 0x2}, {0x8, 0x2}, {0x133, 0x3}, {0xd, 0x2}], [{0x80, 0xbca}, {0x1, 0xab9f}, {0x6, 0x1}, {0x0, 0x7}, {0x8, 0x1ff}, {0x49, 0x7}, {0x1, 0x63d14f22}, {0x2, 0x8}, {0x8727, 0x401}, {0x3, 0x1}, {0x8, 0xf}], 0x9, 0x8}, {[{0x7}, {0xc}, {0xfffffffb, 0x2}, {0x5, 0x2}, {0x7}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x40, 0x2}, {0x10, 0x2}, {0xfff, 0x1}], [{0x2, 0xfff}, {0x5, 0x1}, {0xc4, 0x9}, {0x8, 0x9}, {0x3, 0x9}, {0x5, 0x6}, {0x5, 0xa}, {0x200, 0x8}, {0x2, 0x6}, {0xfffffe1e}, {0x1ed, 0x6}], 0x5, 0x3}, {[{0xfffffff7, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x80, 0x2}, {0x10001, 0x1}, {0xa, 0x2}, {0x4000000, 0x1}, {0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x8, 0x1}], [{0x0, 0x77d}, {0x0, 0x3935}, {0x0, 0x4cf6}, {0x200, 0xfffffff3}, {0x10001, 0x401}, {0xffff, 0x7}, {0x4, 0x6}, {0x8001, 0x6}, {0x4, 0xffffffff}, {0x5}, {0x80, 0x3}], 0x5, 0xb}, {[{0x5791}, {0xfffffff8}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x2}, {0xffffffff, 0x1}, {0x5, 0x3}, {0x2}, {0x8}, {0x3, 0x2}, {0x8}], [{0x6800000, 0x9}, {0x2, 0x9}, {0x5, 0x1000}, {0xfffffbff, 0x7}, {0x8001, 0x3}, {0x3, 0x7}, {0x3}, {0x3, 0xf73}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x7}], 0x6, 0xa}], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0xcf0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r10, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r11 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000240)={0x7, 'gretap0\x00', {0xa3}, 0x800}) sendto$inet6(r11, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r9, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0) 18m19.453842178s ago: executing program 8 (id=9946): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)="f10ec5575fa16c2b000000005f", 0xd}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000180)=""/40, 0x28}], 0x2, &(0x7f0000000400)=""/220, 0xdc}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000680)=""/213, 0xd5}], 0x3, &(0x7f0000000b00)=""/4096, 0x1000}, 0x7}], 0x3, 0x61, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408c0}}], 0x1, 0x4044045) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x4b2280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$caif_stream(0x25, 0x1, 0x1) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x80801, 0x0) ioctl$BLKTRACESTART(r3, 0x125f, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x1, 0x0, {0xffff, 0x1}, {0x47, 0x2}, @cond=[{0x5, 0x8, 0x209, 0xa5b4, 0x6, 0x2}, {0x4, 0x1c99, 0x7, 0x4, 0x2, 0xfffd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x67bf, 0x200c5fb, 0x5b, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 1', 0x16) socket(0xf, 0xa, 0x0) 18m18.91291566s ago: executing program 8 (id=9947): unshare(0x66000080) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x7}) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x0, 0x4c, 0x1a, 0x2b4, 0x73, 0x3b0, 0x258, 0x258, 0x3b0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x284, 0x2b4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@private0, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0x0, 0xffffffff, 0xff], 0x4d5, 0x3501, 0x4, 0x1, 0x15, 0x8}, {@ipv4=@empty, [0xffffffff, 0xffffff00, 0xff, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], 0x4d5, 0x3505, 0x73, 0x0, 0x8, 0x8}, {@ipv4=@remote, [0xff000000, 0x0, 0x0, 0xffffffff], @ipv6=@mcast2, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d2, 0x3501, 0x3a, 0x0, 0x1}, {@ipv4=@private=0xa010102, [0xff, 0xff000000, 0xff, 0xff000000], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xffffffff], 0x4d2, 0x0, 0x2c, 0x1, 0x10}], 0x8, 0x4}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0xfc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {}, [@common=@icmp6={{0x24}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x1002, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (rerun: 64) prctl$PR_SET_SECUREBITS(0x1c, 0x3f) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000300)="ccca39783cce8ad1b3d22c87322d4989c5aeb03ef10b706e0efe74eacd181934deb83d60703b5ff04d4ec6d1fe3f1e0c4cdd37716b6358dcb90a12a110c0873663c7870f71feb3f5dba8cabb7cd25e4226d8eb6a8f84", 0x56}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) unshare(0x36010940) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000001040)=[{r5, 0x462}], 0x1, 0x0, &(0x7f00000010c0)={[0x3]}, 0x8) (async) setuid(0xee01) 18m17.281303656s ago: executing program 8 (id=9953): r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = creat(&(0x7f0000000040)='./file0\x00', 0x40) fadvise64(r7, 0xfff, 0x8, 0x2) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 18m16.600836632s ago: executing program 8 (id=9962): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2404c0c8) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x4, r4}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000080)={{0x30000, 0xdddd6000, 0x0, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x6, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x7, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xe}, {0x1000, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x4, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0xd, 0x22, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x8}, {0x4000, 0x101}, {0x4, 0x6}, 0x10000, 0x0, 0x1000, 0x0, 0x6, 0x1000, 0xdddd1000, [0x8, 0x2, 0x3, 0x3]}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x54}}, 0x4000054) 18m16.332545423s ago: executing program 8 (id=9967): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00') 18m16.164327284s ago: executing program 37 (id=9967): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00') 16m43.232474995s ago: executing program 0 (id=10508): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m42.342472112s ago: executing program 0 (id=10517): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x42}) 16m42.263121159s ago: executing program 0 (id=10518): sched_setscheduler(0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r2, 0x0, 0x0, 0x1) 16m39.812736681s ago: executing program 0 (id=10546): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 16m39.812663599s ago: executing program 0 (id=10547): unshare(0x28040680) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r0, r0, 0x0, 0x80000000) 16m39.012046884s ago: executing program 0 (id=10562): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 16m38.929418732s ago: executing program 38 (id=10562): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 8m11.858032149s ago: executing program 9 (id=13196): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x3c1, 0x3, 0x1434, 0x1280, 0x150, 0x150, 0x1280, 0xf8010000, 0x136c, 0x238, 0x238, 0x136c, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0x0, 0xff0003a0], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x1218, 0x1280, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x9, 0x0, 0xfffffffd], 0x6, [{}, {}, {}, {0x0, 0x0, 0x1}], 0x0, 0x7fffffe, 0xf5495062790f3bb3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xb6, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1490) 8m11.857417268s ago: executing program 9 (id=13197): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="71b44d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)='&rc', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="9912f0e9cbeab733511eda1d02de1315e920d416160bb18659215cbba391bacab28be9ff29f59b80fa512b48471e9e3cc61be606db92049580fa6875b6bf756922dc1560c0c1c2c019269867817d8db2cfd69b9041294d5a87db9ddc42d4092603fb4e1a926aeecbc58359880020dcfff1bf3b3d929f79cd4a2624705b13452c56e3f9554d3d5a0d777f134a7e215ee8108f4c19e8bf3f7669cf21a80edc680f975d9a80e1ddf31c6bd3685eda89170ea69add6169e2467caa2438e02061d2ab992656fc9df773185f4c5517c676590d5f141dfef614b35661f62ded6e37209e280e9bf2f85a", 0xe6}, {&(0x7f0000000580)="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", 0x4c1}, {0x0, 0xb}], 0x3}}, {{&(0x7f0000001a40)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}], 0x4, 0x400c404) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x803}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 8m11.777668606s ago: executing program 9 (id=13198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r3, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019200)=ANY=[@ANYBLOB="3401000010000100feffffff00010000fe8000000000000000000000000000bb64010102000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f00000191c0)=ANY=[@ANYBLOB="180000000000000000000000090000", @ANYRES32=r2, @ANYRES16=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') syz_open_procfs(0x0, &(0x7f0000019400)='net/igmp\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$inet6(r7, &(0x7f0000019080)="8af6e6afa061151f86cf91b75a703b9618aa48016011aa60e76e4cdeefaff2c075661802bdfced27f0389231f4b457b707bf6100ebbb35fb91309d4a1b6d398a4341b482bc0a5cf48e60a4b31bd6ca00dae587e43cc4b4f7bdf0fdb6f0ff454ba0926da8d3f4f99a9eef6fadb2d081bd44688d2c8c6984a16c6d68ed5df5f9d3c6fe728abf67a564990b1df849c9add5d0a18317a8b9e5a063494d76251c394b4e6e3ea9bcf71b4226832403470f733da04813c774649c3c60994741bed38567f352c21dbbeeb3dde63173689c35acb89f0e4efa320aaa7639b5cd669ef2ed4dd57d788a1091447d702fcdf461efd21ef9", 0xf1, 0x4090, &(0x7f0000019180)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 8m10.325784611s ago: executing program 9 (id=13207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010020f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m10.264661866s ago: executing program 9 (id=13209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000cc0)={0x4d0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1b9c, 0x4, 0x5, 0xe71}, {0xfffb, 0x2, 0x8, 0x100}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x8000}, 0x4850) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = getpid() syz_open_procfs$userns(r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r8, 0x0) syz_pidfd_open(r5, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r10, 0x40086602, &(0x7f0000000000)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYRES16=r9, @ANYRES64=r6, @ANYRES64=r5, @ANYRESHEX, @ANYBLOB="c64499b4cce9b8b7e6fa2e1f11fae597c1d0fb4b6e46a748713c43550ed573bbe3091e33c5464bf7ae68fbfd6329613cd5c48f600c92adb40fc6a2ee1bc1f6296aadd5744a5aa30fa0e52ddce03944d5546492df6c4749af362bdcdac8909637cfa5990d24cb34a6cbc59bdfa48a669284967d96476a88470917967c77b106d40a644b16cb88f645491ca4510406740cfd52c8"], &(0x7f00000002c0)=""/203, 0xcb) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket(0x10, 0x803, 0x0) write(r12, &(0x7f0000000300)="1c0000005e001f3814584707f9f4ffffff000000010000001ff80000", 0x1c) prlimit64(r5, 0x4, &(0x7f0000000080)={0x4, 0xe1}, &(0x7f0000000180)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11, 0xffffffffffffffff, 0x2002000}, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x208802, 0x0) 8m10.044976661s ago: executing program 9 (id=13213): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x14001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@private0, 0xf}) recvmsg(0xffffffffffffffff, 0x0, 0x40000102) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x0, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x400000000010, 0x3, 0x0) 7m54.513633513s ago: executing program 39 (id=13213): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x14001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@private0, 0xf}) recvmsg(0xffffffffffffffff, 0x0, 0x40000102) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x0, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x400000000010, 0x3, 0x0) 7.343323097s ago: executing program 6 (id=15460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000050002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd700000000000037c00000400428006000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 7.342945022s ago: executing program 1 (id=15461): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x400, 0x1}}, 0x10) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292e2b2c2d2e2f303132333435363738"], 0x48, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, 0x0, 0x4000) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 6.24168709s ago: executing program 1 (id=15463): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x260001, 0x84, 0x20}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}, 0x802}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 5.679735836s ago: executing program 6 (id=15465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000014850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.679526678s ago: executing program 2 (id=15467): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$dsp(r0, &(0x7f0000000100)="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", 0x12d) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) (async) write$dsp(r0, &(0x7f0000000100)="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", 0x12d) (async) 5.442846083s ago: executing program 6 (id=15469): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1d, 0xa, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295a5}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) writev(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x8000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xa801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000340)={0x48}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, 0x0) syz_open_procfs(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r8, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 4.973845337s ago: executing program 2 (id=15470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c00078008000b40deffffff0500010006000000050005000200000005000400001f00000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.883354694s ago: executing program 2 (id=15471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003780), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000003840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)=ANY=[@ANYBLOB="3cef1400", @ANYRES16=r2, @ANYBLOB="00082abd7000fbdbdf250b00000008003b0008000000050030000100000008000b000400000005002d000000000008003c00ff010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000001c0)=@svm={0x0, 0x1, 0x1080, {0x25000}, {"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"}}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f0000000080)) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) read$FUSE(r9, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000140)={0xd0, 0x0, 0x1, 0x3}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x2) close_range(r4, r4, 0x2) 4.536166449s ago: executing program 1 (id=15473): socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x1ff, 0x0, 0x0, 0x41000}, 0xfffffffffffffe78) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) socket$netlink(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r2, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x80040, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 4.448812495s ago: executing program 6 (id=15474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x5, 0x884, 0xffffffffffffffff, 0x80000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff040300001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet6(r3, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r4, 0x0, 0x0, 0x8811, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @local, 0x7ff}, 0x1c) 3.79711376s ago: executing program 7 (id=15475): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000bc0)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB=',wfdno=', @ANYRES8=r0, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES8=r2]) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0x8, 0xfa11, 0xfffffffd}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x0, 0x8}, {}, @control}, {0x0, 0x20, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xbf}, @connect={{}, {0x0, 0x45}}}], 0x38) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pipe2$watch_queue(0x0, 0x80) (async) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='ed:cb2e') r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x185802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb8}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendfile(r7, r7, 0x0, 0x200000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xf4}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x800452d3, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 3.440432488s ago: executing program 1 (id=15476): openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001200000024"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9de}}, './file0\x00'}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$uinput_user_dev(r8, &(0x7f0000000d80)={'syz1\x00', {0x9, 0x0, 0x6, 0x1}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0xfffffffd, 0xffff, 0x2, 0x20, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x7fc, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x800ec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x6ed8ec1a, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x100, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x80000, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7fff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x2e270, 0xfffe, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x9, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x401, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x82ce, 0xe, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x7, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x2000003, 0x40, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x7, 0x0, 0x0, 0x4, 0x8000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x7, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)={0x264, 0x12, 0x4, 0x70bd26, 0x25dfdbff, {0x28, 0x1, 0x7f, 0x1, {0x4e24, 0x4e23, [0x8, 0x2, 0x9, 0x5], [0x3, 0x1, 0x101, 0xb], r7, [0x3ff, 0x9000]}, 0x80000000, 0xfffffffd}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "c2803a02e11728060a0b733ae8267d1b29f3d940acc20a79792a7478b2abed9a24746a0d62efd35106371b9063c025fc8370a2fd432aeb4bb3512571a57b0bd671ea025ee1aa4ebe50db5ec47ab1cd79e60d6da1c28cd901bc04368c66a29a313e7af9960deb7508eeee00d70b50655192584808"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "253a76c8fe2dd596b0"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "67607938be666f3e22e2da3bc2cc2cec2ed820eea144f0e8d114f2cba17934c6e89abbee9d06c31c28c2cea15757e754f75c98ab64a3f50cb0f9aa0fb8c886b833ca6bcd4db28ff7834e755f83e2475f17c2ad933f8bcc34e40d009dc0b9b785c595a8f03eccc5efd55f90d3a61c05711bf812bfd0a09d36926051c3f598e7676fb89012cf06eee7cc8f8072e725f3cfc135baa78ba2af8e9e89b90eb91a9911355456c5414a3ace8e961ce46e91bcdfd0c79f6043f0947b0d669ab774ac3ee6f81681f6dd9db1cd9daec8ad40e0"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "6ede4ac7e6276721c2bc66233d8dc611cd791725224e53b88fcd4d9b99eaefd8fd029e4d10304d4b48eb021d0ee266e739d278a7000a296864ffeabd43d26ddc2892b775763e733efce7c9b05dd1d663188c8fa43af7869846ac50a5"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "5225d1cd6164fe5b373da4b211e68611b153f9c4332c6179b8c2bb7de6832680b0e934d9b860caaada8193d2c5be3bb6308972897e4916a145a3c1dbae3c61593786a10a6e77e343"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x264}, 0x1, 0x0, 0x0, 0x40080}, 0x20040041) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1800}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r9}) 2.66452477s ago: executing program 7 (id=15477): openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001200000024"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x397) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9de}}, './file0\x00'}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$uinput_user_dev(r8, &(0x7f0000000d80)={'syz1\x00', {0x9, 0x0, 0x6, 0x1}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0xfffffffd, 0xffff, 0x2, 0x20, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x7fc, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x800ec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x6ed8ec1a, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x100, 0x0, 0x100000, 0x0, 0x0, 0x4, 0x4000000, 0x80, 0x0, 0x80000, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7fff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x2e270, 0xfffe, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x9, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x401, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x82ce, 0xe, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x7, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x2000003, 0x40, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x7, 0x0, 0x0, 0x4, 0x8000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x7, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)={0x284, 0x12, 0x4, 0x70bd26, 0x25dfdbff, {0x28, 0x1, 0x7f, 0x1, {0x4e24, 0x4e23, [0x8, 0x2, 0x9, 0x5], [0x3, 0x1, 0x101, 0xb], r7, [0x3ff, 0x9000]}, 0x80000000, 0xfffffffd}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "7b93b458245ea001c403a7d9c0da4253568a84139ac48eef43ed75f380ab"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "c2803a02e11728060a0b733ae8267d1b29f3d940acc20a79792a7478b2abed9a24746a0d62efd35106371b9063c025fc8370a2fd432aeb4bb3512571a57b0bd671ea025ee1aa4ebe50db5ec47ab1cd79e60d6da1c28cd901bc04368c66a29a313e7af9960deb7508eeee00d70b50655192584808"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "253a76c8fe2dd596b0"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "67607938be666f3e22e2da3bc2cc2cec2ed820eea144f0e8d114f2cba17934c6e89abbee9d06c31c28c2cea15757e754f75c98ab64a3f50cb0f9aa0fb8c886b833ca6bcd4db28ff7834e755f83e2475f17c2ad933f8bcc34e40d009dc0b9b785c595a8f03eccc5efd55f90d3a61c05711bf812bfd0a09d36926051c3f598e7676fb89012cf06eee7cc8f8072e725f3cfc135baa78ba2af8e9e89b90eb91a9911355456c5414a3ace8e961ce46e91bcdfd0c79f6043f0947b0d669ab774ac3ee6f81681f6dd9db1cd9daec8ad40e0"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "6ede4ac7e6276721c2bc66233d8dc611cd791725224e53b88fcd4d9b99eaefd8fd029e4d10304d4b48eb021d0ee266e739d278a7000a296864ffeabd43d26ddc2892b775763e733efce7c9b05dd1d663188c8fa43af7869846ac50a5"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "5225d1cd6164fe5b373da4b211e68611b153f9c4332c6179b8c2bb7de6832680b0e934d9b860caaada8193d2c5be3bb6308972897e4916a145a3c1dbae3c61593786a10a6e77"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x284}, 0x1, 0x0, 0x0, 0x40080}, 0x20040041) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffff9, 0x0, 0x1, r9}) 2.663893124s ago: executing program 6 (id=15478): ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x8) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000000c0)="b8dfff9b815458490377593c84ee9594a3795cb26652302f0351a755681e96b69f149bcc4b177b5e3c69090dad641ac0873c677fd592ed2814cdb8fbac4ca80cc1a99dd25bef558c1f55a8810539e8ffd5817d9f38282653fbe8750bd0e0864ce0e8d1c2794817a849467a2d7f", &(0x7f0000000140)=""/43}, 0x1c) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={'\x00', 0x8, 0x6d7, 0x1, 0x0, 0x3, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f0000000200)) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) r4 = dup3(r0, r3, 0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000004, 0x4000010, r2, 0xba613000) (async, rerun: 32) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000280)) (async, rerun: 32) r5 = getpgrp(r1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x1405, 0x200, 0x70bd28, 0x5, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040025}, 0x20000010) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000003c0)=0x3) (async) r6 = open(&(0x7f0000000400)='./file0\x00', 0x280, 0x90) (async) ptrace$pokeuser(0x6, r5, 0xc064, 0xfffffffb) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) r8 = getpgrp(r7) socket$key(0xf, 0x3, 0x2) (async) fcntl$setflags(r2, 0x2, 0x1) (async, rerun: 64) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000540)=0x3, 0x4) (async, rerun: 64) ptrace$setsig(0x4203, r8, 0xe33, &(0x7f0000000580)={0x24, 0x3}) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, r6, 0x1, 0x3}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r4}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000980)={'syztnl1\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x7, 0x7, 0x4, 0x2, {{0x26, 0x4, 0x1, 0xb, 0x98, 0x66, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, {[@timestamp_prespec={0x44, 0x34, 0x43, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x7ba96736}, {@rand_addr=0x64010102, 0x2}, {@local, 0x9}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x80}]}, @rr={0x7, 0x1b, 0x21, [@dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @cipso={0x86, 0x9, 0x1, [{0x0, 0x3, "e6"}]}, @end, @generic={0x19, 0x11, "9068e484f5ff8daff59ddbdd384d00"}, @lsrr={0x83, 0x17, 0xc, [@multicast2, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}, @loopback]}, @end]}}}}}) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x3, [@datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x0, 0x10}, {0x4, 0x5, 0x7}], "6489"}]}, {0x0, [0x3e]}}, &(0x7f0000000a40)=""/191, 0x43, 0xbf, 0x1, 0x2, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xa, 0x22, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x24}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @generic={0x4, 0xc, 0x7, 0x9, 0x9}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xea954559a550da96}}}, &(0x7f0000000880)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0xb, '\x00', r11, @fallback=0x13, r12, 0x8, &(0x7f0000000b40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x5, 0x9, 0xd4}, 0x10, 0x0, r4, 0x2, &(0x7f0000000bc0)=[r6, r0, r4, r0], &(0x7f0000000c00)=[{0x1, 0x1, 0x0, 0xb}, {0xfffffff9, 0x3, 0x10, 0xa}], 0x10, 0x7cbb4fa7}, 0x94) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={r4, 0xffffffffffffffff}, 0x4) (rerun: 32) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000d80)=@generic={&(0x7f0000000d00)='./file0\x00', r13}, 0x14) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000dc0)) 2.177992519s ago: executing program 1 (id=15479): socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x1ff, 0x0, 0x0, 0x41000}, 0xfffffffffffffe78) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) socket$netlink(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r2, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x80040, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syslog(0x2, &(0x7f0000001500)=""/43, 0x2b) 2.168421386s ago: executing program 2 (id=15480): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x3c1, 0x3, 0x1434, 0x1280, 0x150, 0x150, 0x1280, 0xf8010000, 0x136c, 0x238, 0x238, 0x136c, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0x0, 0xff000000], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x1218, 0x1280, 0x0, {0x0, 0xa0030000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x9, 0x0, 0xfffffffd], 0x6, [{}, {}, {}, {0x0, 0x0, 0x1}], 0x0, 0x7fffffe, 0xf5495062790f3bb3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xb6, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1490) 1.993103889s ago: executing program 2 (id=15481): socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x1ff, 0x0, 0x0, 0x41000}, 0xfffffffffffffe78) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) socket$netlink(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r2, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x80040, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 772.702319ms ago: executing program 6 (id=15482): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000080002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd700000000000037c00000400428006000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 588.221435ms ago: executing program 2 (id=15483): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x400, 0x1}}, 0x10) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292e2b2c2d2e2f303132333435363738"], 0x48, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, 0x0, 0x4000) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0)=0xe38, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 582.542813ms ago: executing program 7 (id=15484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000070000000000021800000000ff000000000008000100ac1414000c000900080000003e"], 0x30}}, 0x0) 546.240807ms ago: executing program 1 (id=15485): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="000000000000001400000000000000000000000028410ac44541638434bd23674dcddccfeed3f36d2d0b0fcc6b8cd1c080146bab4da1ca545d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000"], 0x50) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x2, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xc, 0x0, 0xffffffffffffffff, 0x0, r5, 0x1, 0x0, 0x2}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 252.067281ms ago: executing program 7 (id=15486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x64, 0x6, 0x53c, 0x0, 0x190, 0x258, 0x258, 0x258, 0x474, 0x474, 0x474, 0x474, 0x474, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@ipv6={@private1, @private2, [0xffffff00, 0xff], [], 'tunl0\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [], [], 'rose0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x11, 0x1, 0x3, 0x2e}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xffffff00], 'gre0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x2f, 0x8, 0x0, 0x20}, 0x0, 0xec, 0x130, 0x4a0, {}, [@common=@icmp6={{0x24}, {0xe, "066b", 0x1}}, @inet=@rpfilter={{0x24}, {0xc}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@local, 0x35, 0x36, 0x8}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x80008}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x598) 183.823584ms ago: executing program 7 (id=15487): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x80) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) close(r6) read$FUSE(r6, &(0x7f0000004640)={0x2020}, 0x2020) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x84, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ']'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x40000) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 0s ago: executing program 7 (id=15488): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendto$isdn(r1, 0x0, 0xfffffeb3, 0x0, &(0x7f00000003c0)={0x22, 0xff, 0x4, 0xd, 0x81}, 0x6) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x2048, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) kernel console output (not intermixed with test programs): ess Request (9) to port 0 [ 2784.896353][T14345] usb 52-1: new SuperSpeed USB device number 9 using vhci_hcd [ 2785.119253][T25531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14629'. [ 2785.380993][T25528] vhci_hcd: connection reset by peer [ 2785.383031][ T8734] vhci_hcd vhci_hcd.7: stop threads [ 2785.385154][ T8734] vhci_hcd vhci_hcd.7: release socket [ 2785.386934][ T8734] vhci_hcd vhci_hcd.7: disconnect device [ 2785.683697][T25539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2785.685800][T25539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2785.690137][T25539] vhci_hcd vhci_hcd.0: Device attached [ 2785.963137][T16617] usb 40-1: SetAddress Request (67) to port 0 [ 2785.966082][T16617] usb 40-1: new SuperSpeed USB device number 67 using vhci_hcd [ 2785.985456][ T3560] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2786.200589][T25549] siw: device registration error -23 [ 2786.954268][T25560] input: syz1 as /devices/virtual/input/input422 [ 2787.107119][T25540] vhci_hcd: connection reset by peer [ 2787.124737][ T8727] vhci_hcd vhci_hcd.1: stop threads [ 2787.133846][ T8727] vhci_hcd vhci_hcd.1: release socket [ 2787.141778][T25553] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2787.144684][T25553] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2787.149978][ T8727] vhci_hcd vhci_hcd.1: disconnect device [ 2787.158839][T25553] vhci_hcd vhci_hcd.0: Device attached [ 2787.780528][T25562] vhci_hcd: connection closed [ 2787.780901][ T8727] vhci_hcd vhci_hcd.2: stop threads [ 2787.785548][ T8727] vhci_hcd vhci_hcd.2: release socket [ 2787.788042][ T8727] vhci_hcd vhci_hcd.2: disconnect device [ 2788.010512][T25565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14637'. [ 2788.302668][T25573] input: syz1 as /devices/virtual/input/input423 [ 2788.532691][T25579] input: syz1 as /devices/virtual/input/input424 [ 2790.002213][T14345] usb 52-1: device descriptor read/8, error -110 [ 2790.566991][T25588] input: syz1 as /devices/virtual/input/input425 [ 2790.801563][T14345] usb usb52-port1: attempt power cycle [ 2791.113281][T16617] usb 40-1: device descriptor read/8, error -110 [ 2791.458431][T14345] usb usb52-port1: unable to enumerate USB device [ 2791.552424][T16617] usb usb40-port1: attempt power cycle [ 2792.207747][T16617] usb usb40-port1: unable to enumerate USB device [ 2792.537651][T25622] siw: device registration error -23 [ 2793.048718][T25626] input: syz1 as /devices/virtual/input/input426 [ 2795.295089][T25645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14657'. [ 2795.297865][T25645] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14657'. [ 2795.444529][T25649] input: syz1 as /devices/virtual/input/input427 [ 2796.583430][T25659] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2796.585726][T25659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2796.594843][T25662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14661'. [ 2796.638245][T25659] vhci_hcd vhci_hcd.0: Device attached [ 2796.689403][T25672] input: syz1 as /devices/virtual/input/input428 [ 2796.732795][T25669] overlayfs: missing 'lowerdir' [ 2796.916075][T25659] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14660'. [ 2797.013518][T14345] usb 40-1: SetAddress Request (71) to port 0 [ 2797.015759][T14345] usb 40-1: new SuperSpeed USB device number 71 using vhci_hcd [ 2797.536327][T25664] vhci_hcd: connection reset by peer [ 2797.554664][ T8733] vhci_hcd vhci_hcd.1: stop threads [ 2797.589351][ T8733] vhci_hcd vhci_hcd.1: release socket [ 2797.634274][ T8733] vhci_hcd vhci_hcd.1: disconnect device [ 2797.837758][T25684] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2798.230791][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 2798.230805][ T40] audit: type=1326 audit(3055.220:102592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25685 comm="syz.1.14667" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748d579 code=0x0 [ 2798.876427][T25695] siw: device registration error -23 [ 2799.783212][T25700] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2799.785328][T25700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2799.789179][T25700] vhci_hcd vhci_hcd.0: Device attached [ 2799.996775][T25701] vhci_hcd: connection closed [ 2799.997188][ T8733] vhci_hcd vhci_hcd.2: stop threads [ 2800.002405][ T8733] vhci_hcd vhci_hcd.2: release socket [ 2800.004791][ T8733] vhci_hcd vhci_hcd.2: disconnect device [ 2800.053208][T24035] usb 42-1: enqueue for inactive port 0 [ 2800.384487][T25705] input: syz1 as /devices/virtual/input/input429 [ 2800.596780][T24035] usb usb42-port1: attempt power cycle [ 2800.697297][T25714] input: syz1 as /devices/virtual/input/input430 [ 2801.175130][T24035] usb usb42-port1: unable to enumerate USB device [ 2802.149468][T25718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14675'. [ 2802.175471][T14345] usb 40-1: device descriptor read/8, error -110 [ 2802.304305][ T40] audit: type=1326 audit(3059.300:102593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25720 comm="syz.6.14677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7fc00000 [ 2802.320714][ T40] audit: type=1326 audit(3059.300:102594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25720 comm="syz.6.14677" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2579 code=0x7fc00000 [ 2802.390994][T25728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14678'. [ 2802.395042][T25728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14678'. [ 2802.564307][T14345] usb usb40-port1: attempt power cycle [ 2802.586920][T25731] input: syz1 as /devices/virtual/input/input431 [ 2803.038955][ T40] audit: type=1326 audit(3060.035:102595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25720 comm="syz.6.14677" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7fc00000 [ 2803.124615][T14345] usb usb40-port1: unable to enumerate USB device [ 2803.664854][T25747] netlink: 'syz.6.14684': attribute type 39 has an invalid length. [ 2803.690443][T25751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14686'. [ 2803.770896][T25754] kvm: Disabled LAPIC found during irq injection [ 2803.819777][T25756] binder: 25755:25756 ioctl 9208 42c8 returned -22 [ 2803.873217][T25758] loop5: detected capacity change from 0 to 7 [ 2803.877456][T20613] Dev loop5: unable to read RDB block 7 [ 2803.879514][T20613] loop5: unable to read partition table [ 2803.881711][T20613] loop5: partition table beyond EOD, truncated [ 2803.887884][T25758] Dev loop5: unable to read RDB block 7 [ 2803.891516][T25758] loop5: unable to read partition table [ 2803.894345][T25758] loop5: partition table beyond EOD, truncated [ 2803.896599][T25758] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2803.964707][T25761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14689'. [ 2803.982573][T25763] binder: 25762:25763 ioctl 9208 42c8 returned -22 [ 2804.156273][ T40] audit: type=1326 audit(3061.155:102596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.1.14690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7fc00000 [ 2804.165758][ T40] audit: type=1326 audit(3061.165:102597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.1.14690" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf748d579 code=0x7fc00000 [ 2804.328079][T25772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14692'. [ 2804.547717][T25777] input: syz1 as /devices/virtual/input/input432 [ 2804.870086][ T40] audit: type=1326 audit(3061.865:102598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.1.14690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7fc00000 [ 2804.990455][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14696'. [ 2805.020596][T25785] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2805.036669][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14699'. [ 2805.060669][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14708'. [ 2805.091695][T25795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14702'. [ 2805.101930][T25790] netlink: 'syz.2.14700': attribute type 39 has an invalid length. [ 2805.209703][T25801] kvm: Disabled LAPIC found during irq injection [ 2806.114019][T25827] siw: device registration error -23 [ 2807.013908][ T40] audit: type=1326 audit(3064.015:102599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.6.14718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2807.021046][ T40] audit: type=1326 audit(3064.015:102600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.6.14718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2807.036735][ T40] audit: type=1326 audit(3064.015:102601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.6.14718" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2807.053913][ T40] audit: type=1326 audit(3064.015:102602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.6.14718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2807.117257][ T40] audit: type=1326 audit(3064.015:102603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.6.14718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2807.132980][ T40] audit: type=1326 audit(3064.015:102604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.6.14718" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2807.140903][ T40] audit: type=1326 audit(3064.015:102605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25839 comm="syz.6.14718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2807.787249][T25845] __nla_validate_parse: 2 callbacks suppressed [ 2807.787265][T25845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14720'. [ 2807.854827][T25847] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2807.905522][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14723'. [ 2807.908259][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14723'. [ 2808.129095][T25866] input: syz1 as /devices/virtual/input/input433 [ 2808.598327][T25876] bridge1: entered allmulticast mode [ 2808.601852][T25876] ªªªªª»: renamed from hsr0 (while UP) [ 2810.495875][T25905] syzkaller0: entered promiscuous mode [ 2810.497855][T25905] syzkaller0: entered allmulticast mode [ 2811.015599][T25923] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14749'. [ 2811.018456][T25923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14749'. [ 2811.207134][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 2811.207147][ T40] audit: type=1326 audit(3068.222:102668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.219256][ T40] audit: type=1326 audit(3068.222:102669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.227082][ T40] audit: type=1326 audit(3068.222:102670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.236671][ T40] audit: type=1326 audit(3068.222:102671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.245512][ T40] audit: type=1326 audit(3068.222:102672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.253525][ T40] audit: type=1326 audit(3068.222:102673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.261597][ T40] audit: type=1326 audit(3068.222:102674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.272784][ T40] audit: type=1326 audit(3068.222:102675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.281130][ T40] audit: type=1326 audit(3068.222:102676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.292603][ T40] audit: type=1326 audit(3068.222:102677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.6.14752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2811.303783][T25934] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 2811.306571][T25934] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2811.313113][T25934] vhci_hcd vhci_hcd.0: Device attached [ 2811.468998][T25934] netlink: 64 bytes leftover after parsing attributes in process `syz.7.14747'. [ 2811.593683][ T8779] usb 52-1: SetAddress Request (13) to port 0 [ 2811.596123][ T8779] usb 52-1: new SuperSpeed USB device number 13 using vhci_hcd [ 2811.924599][T25936] vhci_hcd: connection reset by peer [ 2811.926418][ T8733] vhci_hcd vhci_hcd.7: stop threads [ 2811.928028][ T8733] vhci_hcd vhci_hcd.7: release socket [ 2811.930236][ T8733] vhci_hcd vhci_hcd.7: disconnect device [ 2811.977705][T25939] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2811.980494][T25939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2811.984625][T25939] vhci_hcd vhci_hcd.0: Device attached [ 2812.077816][T25944] input: syz1 as /devices/virtual/input/input434 [ 2812.130627][T25940] vhci_hcd: connection closed [ 2812.131013][ T8733] vhci_hcd vhci_hcd.6: stop threads [ 2812.134516][ T8733] vhci_hcd vhci_hcd.6: release socket [ 2812.136239][ T8733] vhci_hcd vhci_hcd.6: disconnect device [ 2812.869272][T25950] input: syz1 as /devices/virtual/input/input435 [ 2813.100410][T25954] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2813.207546][T25958] syzkaller0: entered promiscuous mode [ 2813.210066][T25958] syzkaller0: entered allmulticast mode [ 2813.365144][T25959] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2813.367955][T25959] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2813.449322][T25959] vhci_hcd vhci_hcd.0: Device attached [ 2813.586865][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14759'. [ 2813.723825][T14345] usb 50-1: SetAddress Request (15) to port 0 [ 2813.726882][T14345] usb 50-1: new SuperSpeed USB device number 15 using vhci_hcd [ 2813.742014][T25960] vhci_hcd: connection closed [ 2813.748248][ T8727] vhci_hcd vhci_hcd.6: stop threads [ 2813.773986][ T8727] vhci_hcd vhci_hcd.6: release socket [ 2813.782130][ T8727] vhci_hcd vhci_hcd.6: disconnect device [ 2814.363708][T25978] input: syz1 as /devices/virtual/input/input436 [ 2816.723956][ T8779] usb 52-1: device descriptor read/8, error -110 [ 2816.892610][T25990] input: syz1 as /devices/virtual/input/input437 [ 2817.143325][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14770'. [ 2817.288811][T26008] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2817.441769][T26016] input: syz1 as /devices/virtual/input/input438 [ 2817.568774][ T8779] usb usb52-port1: attempt power cycle [ 2818.160896][ T8779] usb usb52-port1: unable to enumerate USB device [ 2818.485235][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14777'. [ 2818.793542][T14345] usb 50-1: device descriptor read/8, error -110 [ 2818.825182][T26012] input: syz1 as /devices/virtual/input/input439 [ 2819.046706][T26029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14780'. [ 2819.070008][T26031] netlink: 64 bytes leftover after parsing attributes in process `syz.6.14781'. [ 2819.073585][T26031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14781'. [ 2819.093200][T26032] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 2819.095991][T26032] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2819.103026][T26032] vhci_hcd vhci_hcd.0: Device attached [ 2819.183031][T26041] input: syz1 as /devices/virtual/input/input440 [ 2819.238303][T14345] usb usb50-port1: attempt power cycle [ 2819.369893][T26033] vhci_hcd: connection closed [ 2819.370238][ T3704] vhci_hcd vhci_hcd.7: stop threads [ 2819.376742][ T3704] vhci_hcd vhci_hcd.7: release socket [ 2819.378360][ T3704] vhci_hcd vhci_hcd.7: disconnect device [ 2819.392968][ T8615] usb 52-1: enqueue for inactive port 0 [ 2819.487138][T26048] input: syz1 as /devices/virtual/input/input441 [ 2820.066450][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 2820.066780][ T40] audit: type=1326 audit(3077.082:102704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.104094][ T8615] usb usb52-port1: attempt power cycle [ 2820.108556][T26054] [U] è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è`è: [ 2820.116350][T26054] [U] [ 2820.117436][T26054] [U] [ 2820.118528][T26054] [U] [ 2820.119682][T26054] [U] [ 2820.120618][T26054] [U] [ 2820.121500][T26054] [U] [ 2820.122380][T26054] [U] [ 2820.142645][ T40] audit: type=1326 audit(3077.092:102705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.195870][ T40] audit: type=1326 audit(3077.102:102706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.218267][T26054] [U] [ 2820.219194][T26054] [U] [ 2820.220094][T26054] [U] [ 2820.221018][T26054] [U] [ 2820.221911][T26054] [U] [ 2820.222815][T26054] [U] [ 2820.223738][T26054] [U] [ 2820.224622][T26054] [U] [ 2820.232439][ T40] audit: type=1326 audit(3077.102:102707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.251111][T26054] [U] [ 2820.252054][T26054] [U] [ 2820.253083][T26054] [U] [ 2820.253978][T26054] [U] [ 2820.254879][T26054] [U] [ 2820.255830][T26054] [U] [ 2820.256737][T26054] [U] [ 2820.257659][T26054] [U] [ 2820.266625][ T40] audit: type=1326 audit(3077.102:102708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.276250][T26060] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2820.297891][ T40] audit: type=1326 audit(3077.112:102709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.307467][T26054] [U] [ 2820.308379][T26054] [U] [ 2820.309270][T26054] [U] [ 2820.310157][T26054] [U] [ 2820.311047][T26054] [U] [ 2820.311955][T26054] [U] [ 2820.312970][T26054] [U] [ 2820.314096][T26054] [U] [ 2820.346898][ T40] audit: type=1326 audit(3077.202:102710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.353661][T26054] [U] [ 2820.354568][T26054] [U] [ 2820.355488][T26054] [U] [ 2820.356368][T26054] [U] [ 2820.357251][T26054] [U] [ 2820.358131][T26054] [U] [ 2820.359019][T26054] [U] [ 2820.359922][T26054] [U] [ 2820.378765][ T40] audit: type=1326 audit(3077.202:102711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.385683][T26054] [U] [ 2820.386586][T26054] [U] [ 2820.387487][T26054] [U] [ 2820.388367][T26054] [U] [ 2820.389249][T26054] [U] [ 2820.390136][T26054] [U] [ 2820.391017][T26054] [U] [ 2820.391937][T26054] [U] [ 2820.392844][T26054] [U] [ 2820.393741][T26054] [U] [ 2820.394686][T26054] [U] [ 2820.395611][T26054] [U] [ 2820.396493][T26054] [U] [ 2820.397376][T26054] [U] [ 2820.398262][T26054] [U] [ 2820.399154][T26054] [U] [ 2820.410211][T26065] input: syz1 as /devices/virtual/input/input442 [ 2820.428928][T26054] [U] [ 2820.430344][T26054] [U] [ 2820.431562][T26054] [U] [ 2820.432774][T26054] [U] [ 2820.433963][T26054] [U] [ 2820.434892][T26054] [U] [ 2820.436023][T26054] [U] [ 2820.437066][T26054] [U] [ 2820.446430][ T40] audit: type=1326 audit(3077.462:102712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.453903][T26054] [U] [ 2820.453967][T26054] [U] [ 2820.453997][T26054] [U] [ 2820.454024][T26054] [U] [ 2820.454049][T26054] [U] [ 2820.454075][T26054] [U] [ 2820.454102][T26054] [U] [ 2820.454129][T26054] [U] [ 2820.454165][T26054] [U] [ 2820.454191][T26054] [U] [ 2820.454218][T26054] [U] [ 2820.454243][T26054] [U] [ 2820.454268][T26054] [U] [ 2820.454295][T26054] [U] [ 2820.468861][T26054] [U] [ 2820.469752][T26054] [U] [ 2820.470316][T14345] usb usb50-port1: unable to enumerate USB device [ 2820.470716][T26054] [U] [ 2820.480702][ T40] audit: type=1326 audit(3077.462:102713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26051 comm="syz.1.14786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2820.499957][T26054] [U] [ 2820.501343][T26054] [U] [ 2820.502640][T26054] [U] [ 2820.503975][T26054] [U] [ 2820.505302][T26054] [U] [ 2820.506592][T26054] [U] [ 2820.507877][T26054] [U] [ 2820.509192][T26054] [U] [ 2820.511004][T26054] [U] [ 2820.512330][T26054] [U] [ 2820.513667][T26054] [U] [ 2820.514973][T26054] [U] [ 2820.516303][T26054] [U] [ 2820.517574][T26054] [U] [ 2820.518849][T26054] [U] [ 2820.520139][T26054] [U] [ 2820.540800][T26054] [U] [ 2820.541719][T26054] [U] [ 2820.542816][T26054] [U] [ 2820.543790][T26054] [U] [ 2820.544680][T26054] [U] [ 2820.545630][T26054] [U] [ 2820.546582][T26054] [U] [ 2820.547481][T26054] [U] [ 2820.569259][T26054] [U] [ 2820.570592][T26054] [U] [ 2820.571880][T26054] [U] [ 2820.573177][T26054] [U] [ 2820.574490][T26054] [U] [ 2820.575825][T26054] [U] [ 2820.577097][T26054] [U] [ 2820.578376][T26054] [U] [ 2820.587486][T26054] [U] [ 2820.588819][T26054] [U] [ 2820.589913][T26054] [U] [ 2820.590934][T26054] [U] [ 2820.591845][T26054] [U] [ 2820.592837][T26054] [U] [ 2820.593872][T26054] [U] [ 2820.595028][T26054] [U] [ 2820.603050][T26054] [U] [ 2820.604053][T26054] [U] [ 2820.605005][T26054] [U] [ 2820.605902][T26054] [U] [ 2820.606861][T26054] [U] [ 2820.607822][T26054] [U] [ 2820.608720][T26054] [U] [ 2820.688854][T26071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14791'. [ 2820.766671][T26072] random: crng reseeded on system resumption [ 2820.789183][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14790'. [ 2820.846268][T26073] overlayfs: failed to resolve './bus': -2 [ 2820.983470][ T8615] usb usb52-port1: unable to enumerate USB device [ 2821.505234][T26078] IPv6: Can't replace route, no match found [ 2821.703355][T26082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2821.705600][T26082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2821.708666][T26082] vhci_hcd vhci_hcd.0: Device attached [ 2821.973139][T11046] usb 40-1: SetAddress Request (75) to port 0 [ 2821.975201][T11046] usb 40-1: new SuperSpeed USB device number 75 using vhci_hcd [ 2822.037859][T26084] vhci_hcd: connection reset by peer [ 2822.040031][ T3702] vhci_hcd vhci_hcd.1: stop threads [ 2822.041659][ T3702] vhci_hcd vhci_hcd.1: release socket [ 2822.043427][ T3702] vhci_hcd vhci_hcd.1: disconnect device [ 2822.090464][T26097] input: syz1 as /devices/virtual/input/input443 [ 2822.777557][T26110] input: syz1 as /devices/virtual/input/input444 [ 2824.898155][T26123] binder: 26122:26123 ioctl 6 80000580 returned -22 [ 2825.038077][T26127] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2825.039958][T26127] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2825.042439][T26127] vhci_hcd vhci_hcd.0: Device attached [ 2825.178724][T26128] vhci_hcd: connection closed [ 2825.181622][ T3702] vhci_hcd vhci_hcd.6: stop threads [ 2825.186027][ T3702] vhci_hcd vhci_hcd.6: release socket [ 2825.188569][ T3702] vhci_hcd vhci_hcd.6: disconnect device [ 2825.760400][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14818'. [ 2825.862842][T26146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14812'. [ 2825.921665][T26150] input: syz1 as /devices/virtual/input/input445 [ 2826.504042][T26159] siw: device registration error -23 [ 2827.379874][T11046] usb 40-1: device descriptor read/8, error -110 [ 2827.719233][T26162] netlink: 'syz.1.14815': attribute type 1 has an invalid length. [ 2828.344129][T26184] siw: device registration error -23 [ 2829.238149][T11046] usb usb40-port1: attempt power cycle [ 2829.764363][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 2829.764381][ T40] audit: type=1326 audit(3086.797:102784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26195 comm="syz.7.14825" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 2829.858028][T26201] input: syz1 as /devices/virtual/input/input446 [ 2829.928757][T11046] usb usb40-port1: unable to enumerate USB device [ 2830.325278][T26211] input: syz1 as /devices/virtual/input/input447 [ 2830.673202][T14345] usb 11-1: new high-speed USB device number 51 using dummy_hcd [ 2830.824511][T14345] usb 11-1: Using ep0 maxpacket: 16 [ 2830.830511][T14345] usb 11-1: config 0 has no interfaces? [ 2830.835978][T14345] usb 11-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2830.839926][T14345] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.844030][T14345] usb 11-1: Product: syz [ 2830.846016][T14345] usb 11-1: Manufacturer: syz [ 2830.848172][T14345] usb 11-1: SerialNumber: syz [ 2830.854070][T14345] usb 11-1: config 0 descriptor?? [ 2831.617867][T26225] input: syz1 as /devices/virtual/input/input448 [ 2831.861358][T26229] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2832.850686][T26233] input: syz1 as /devices/virtual/input/input449 [ 2833.316522][T11046] usb 11-1: USB disconnect, device number 51 [ 2833.394651][T26242] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2833.397049][T26242] overlayfs: failed to set xattr on upper [ 2833.398982][T26242] overlayfs: ...falling back to redirect_dir=nofollow. [ 2833.411971][T26244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14840'. [ 2833.670768][T26250] siw: device registration error -23 [ 2834.342020][T26264] binder: 26263:26264 ioctl 40189429 80000000 returned -22 [ 2835.585247][T26291] siw: device registration error -23 [ 2835.958151][T26295] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14855'. [ 2836.019485][T26299] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14857'. [ 2836.137027][T26307] netlink: 128 bytes leftover after parsing attributes in process `syz.7.14861'. [ 2836.140063][T26307] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2836.839216][T26315] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14864'. [ 2837.053877][T26321] xfrm0: entered promiscuous mode [ 2837.055775][T26321] xfrm0: entered allmulticast mode [ 2838.543109][T26351] netlink: 'syz.2.14876': attribute type 4 has an invalid length. [ 2838.562421][T26351] netlink: 'syz.2.14876': attribute type 4 has an invalid length. [ 2838.573849][T26353] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2839.043009][T26367] siw: device registration error -23 [ 2839.952340][T26374] input: syz1 as /devices/virtual/input/input450 [ 2840.320415][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2840.645185][T26380] input: syz1 as /devices/virtual/input/input451 [ 2840.918012][T26375] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2840.920185][T26375] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2840.959822][T26375] vhci_hcd vhci_hcd.0: Device attached [ 2840.959869][T26377] vhci_hcd: connection closed [ 2840.970312][T22666] vhci_hcd vhci_hcd.6: stop threads [ 2840.974237][T22666] vhci_hcd vhci_hcd.6: release socket [ 2840.997445][T22666] vhci_hcd vhci_hcd.6: disconnect device [ 2842.535360][T26396] netlink: 48 bytes leftover after parsing attributes in process `syz.7.14886'. [ 2842.907730][ T40] audit: type=1800 audit(3099.949:102785): pid=26404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.14888" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2843.089894][T26418] input: syz1 as /devices/virtual/input/input452 [ 2843.203745][T26420] siw: device registration error -23 [ 2843.263377][T26414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14892'. [ 2844.145087][T26428] 9p: Bad value for 'rfdno' [ 2844.483064][ T8733] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2845.557340][T26443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2846.286689][T26461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2846.852698][T26470] batman_adv: batadv0: Adding interface: gretap1 [ 2846.856247][T26470] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2846.867586][T26470] batman_adv: batadv0: Interface activated: gretap1 [ 2847.229978][T26477] ceph: No source [ 2847.517565][T26485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14914'. [ 2847.521360][T26485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14914'. [ 2847.873092][ T40] audit: type=1326 audit(3104.909:102786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.893006][ T40] audit: type=1326 audit(3104.909:102787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.902123][ T40] audit: type=1326 audit(3104.909:102788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.911321][ T40] audit: type=1326 audit(3104.909:102789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.923496][ T40] audit: type=1326 audit(3104.909:102790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.941742][ T40] audit: type=1326 audit(3104.909:102791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.948780][ T40] audit: type=1326 audit(3104.909:102792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.955823][ T40] audit: type=1326 audit(3104.909:102793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.963215][ T40] audit: type=1326 audit(3104.909:102794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.978814][ T40] audit: type=1326 audit(3104.909:102795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.990695][ T40] audit: type=1326 audit(3104.909:102796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2847.998042][ T40] audit: type=1326 audit(3104.909:102797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2848.013229][ T40] audit: type=1326 audit(3104.909:102798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2848.033668][ T40] audit: type=1326 audit(3104.909:102799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26493 comm="syz.7.14917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2848.238218][T26499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14918'. [ 2848.610607][T26487] input: syz1 as /devices/virtual/input/input453 [ 2848.713744][T26503] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 2848.733440][T26495] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 2848.735761][T26495] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2848.738931][T26495] vhci_hcd vhci_hcd.0: Device attached [ 2848.840868][T26511] siw: device registration error -23 [ 2849.003444][ T8779] usb 52-1: SetAddress Request (21) to port 0 [ 2849.005575][ T8779] usb 52-1: new SuperSpeed USB device number 21 using vhci_hcd [ 2849.516106][T26530] input: syz1 as /devices/virtual/input/input454 [ 2850.255923][T26507] vhci_hcd: connection reset by peer [ 2850.259388][ T3703] vhci_hcd vhci_hcd.7: stop threads [ 2850.261252][ T3703] vhci_hcd vhci_hcd.7: release socket [ 2850.264364][ T3703] vhci_hcd vhci_hcd.7: disconnect device [ 2852.914654][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14940'. [ 2853.400042][T26591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14946'. [ 2853.404574][T26591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14946'. [ 2853.491595][T26596] overlayfs: failed to resolve 'obj_type=syz': -2 [ 2853.551521][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14949'. [ 2853.575328][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 2853.575344][ T40] audit: type=1326 audit(3110.619:102818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26594 comm="syz.2.14948" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2579 code=0x0 [ 2854.073685][ T8779] usb 52-1: device descriptor read/8, error -110 [ 2854.463658][ T8779] usb usb52-port1: attempt power cycle [ 2855.025200][ T8779] usb usb52-port1: unable to enumerate USB device [ 2855.399650][T26625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14958'. [ 2855.778016][T26634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14960'. [ 2855.781937][T26634] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14960'. [ 2855.998753][T26638] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.14961'. [ 2856.176532][ T40] audit: type=1804 audit(3113.219:102819): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14966" name="/newroot/565/file0" dev="tmpfs" ino=3019 res=1 errno=0 [ 2856.191981][ T40] audit: type=1326 audit(3113.229:102820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.7.14967" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 2856.484167][T26662] input: syz1 as /devices/virtual/input/input455 [ 2857.181023][T26667] input: syz1 as /devices/virtual/input/input456 [ 2858.949184][T26689] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2859.060607][T26692] input: syz1 as /devices/virtual/input/input457 [ 2859.088373][ T40] audit: type=1326 audit(3116.129:102821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.103938][ T40] audit: type=1326 audit(3116.129:102822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.110682][ T40] audit: type=1326 audit(3116.129:102823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.128069][ T40] audit: type=1326 audit(3116.129:102824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.138109][ T40] audit: type=1326 audit(3116.129:102825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.153034][ T40] audit: type=1326 audit(3116.129:102826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.293042][ T40] audit: type=1326 audit(3116.129:102827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.303179][ T40] audit: type=1326 audit(3116.129:102828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.342249][ T40] audit: type=1326 audit(3116.129:102829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.374566][ T40] audit: type=1326 audit(3116.129:102830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.6.14978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2859.417611][T26701] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2859.419754][T26701] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2859.436048][T26701] vhci_hcd vhci_hcd.0: Device attached [ 2859.566412][T26701] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14981'. [ 2859.733132][T16617] usb 42-1: SetAddress Request (105) to port 0 [ 2859.735214][T16617] usb 42-1: new SuperSpeed USB device number 105 using vhci_hcd [ 2859.751910][T26706] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2859.754744][T26706] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2859.762998][T26706] vhci_hcd vhci_hcd.0: Device attached [ 2859.971150][T26707] vhci_hcd: connection closed [ 2859.985666][T19344] vhci_hcd vhci_hcd.6: stop threads [ 2859.989771][T19344] vhci_hcd vhci_hcd.6: release socket [ 2860.017038][T19344] vhci_hcd vhci_hcd.6: disconnect device [ 2860.044039][T17299] usb 50-1: enqueue for inactive port 0 [ 2860.323690][T26703] vhci_hcd: connection reset by peer [ 2860.337407][ T3704] vhci_hcd vhci_hcd.2: stop threads [ 2860.339937][ T3704] vhci_hcd vhci_hcd.2: release socket [ 2860.344979][ T3704] vhci_hcd vhci_hcd.2: disconnect device [ 2860.555834][T17299] usb usb50-port1: attempt power cycle [ 2860.850000][T26720] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14985'. [ 2860.913834][T26720] pim6reg: entered allmulticast mode [ 2861.123983][T17299] usb usb50-port1: unable to enumerate USB device [ 2861.280208][T26735] input: syz1 as /devices/virtual/input/input458 [ 2863.332562][T26717] pim6reg: left allmulticast mode [ 2863.641508][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14990'. [ 2863.648882][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14990'. [ 2863.652306][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14990'. [ 2863.656890][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14990'. [ 2863.660040][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14990'. [ 2864.269990][T26750] syzkaller0: entered promiscuous mode [ 2864.271834][T26750] syzkaller0: entered allmulticast mode [ 2864.405676][T26754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14993'. [ 2864.776671][T26769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14998'. [ 2864.824371][T16617] usb 42-1: device descriptor read/8, error -110 [ 2864.898011][T26774] netlink: 'syz.6.15000': attribute type 1 has an invalid length. [ 2864.901026][T26774] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15000'. [ 2864.998822][T26775] input: syz1 as /devices/virtual/input/input459 [ 2865.223949][T16617] usb usb42-port1: attempt power cycle [ 2865.875033][T16617] usb usb42-port1: unable to enumerate USB device [ 2866.436386][T26788] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2866.544122][T26798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15008'. [ 2866.580795][T26799] siw: device registration error -23 [ 2866.836708][T26806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15009'. [ 2867.435476][T26816] input: syz1 as /devices/virtual/input/input460 [ 2867.952119][T26821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15014'. [ 2867.956861][T26821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15014'. [ 2868.297687][T20613] udevd[20613]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 2868.518817][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 2868.518830][ T40] audit: type=1326 audit(3125.569:102900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2868.545077][T26825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15015'. [ 2868.568864][T26825] pim6reg: entered allmulticast mode [ 2868.943048][ T40] audit: type=1326 audit(3125.569:102901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2868.949916][ T40] audit: type=1326 audit(3125.569:102902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2868.957005][ T40] audit: type=1326 audit(3125.569:102903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2868.965362][ T40] audit: type=1326 audit(3125.569:102904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2868.972692][ T40] audit: type=1326 audit(3125.569:102905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2868.979815][ T40] audit: type=1326 audit(3125.569:102906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2868.986943][ T40] audit: type=1326 audit(3125.569:102907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2868.993879][ T40] audit: type=1326 audit(3125.569:102908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2869.000922][ T40] audit: type=1326 audit(3125.569:102909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.1.15015" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 2869.386874][T26822] pim6reg: left allmulticast mode [ 2869.635898][T26834] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2869.646021][T26836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15018'. [ 2869.696353][T26838] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 2869.699099][T26838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2869.705735][T26838] vhci_hcd vhci_hcd.0: Device attached [ 2869.874404][T26851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15023'. [ 2869.992205][T26853] input: syz1 as /devices/virtual/input/input461 [ 2870.003029][T17284] usb 52-1: SetAddress Request (25) to port 0 [ 2870.005688][T17284] usb 52-1: new SuperSpeed USB device number 25 using vhci_hcd [ 2871.079006][T26839] vhci_hcd: connection reset by peer [ 2871.081515][T12083] vhci_hcd vhci_hcd.7: stop threads [ 2871.084054][T12083] vhci_hcd vhci_hcd.7: release socket [ 2871.086312][T12083] vhci_hcd vhci_hcd.7: disconnect device [ 2871.157823][T26869] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2872.549808][T26896] input: syz1 as /devices/virtual/input/input462 [ 2872.825737][T26903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15038'. [ 2873.034299][T26907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15040'. [ 2873.216338][T26916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15041'. [ 2873.259619][T26918] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2873.709473][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15048'. [ 2873.739909][T26937] xt_policy: neither incoming nor outgoing policy selected [ 2873.744060][T26938] xt_policy: neither incoming nor outgoing policy selected [ 2873.934791][T26942] siw: device registration error -23 [ 2873.973972][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 2873.973985][ T40] audit: type=1326 audit(3131.029:102945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26940 comm="syz.7.15051" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 2875.144547][T17284] usb 52-1: device descriptor read/8, error -110 [ 2875.437390][T26959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2875.440045][T26959] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2875.453413][T26959] vhci_hcd vhci_hcd.0: Device attached [ 2875.715824][ T40] audit: type=1326 audit(3132.769:102946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.724042][ T40] audit: type=1326 audit(3132.769:102947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.731732][ T40] audit: type=1326 audit(3132.779:102948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.733163][T14418] usb 40-1: SetAddress Request (79) to port 0 [ 2875.744554][T14418] usb 40-1: new SuperSpeed USB device number 79 using vhci_hcd [ 2875.745313][ T40] audit: type=1326 audit(3132.779:102949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.760286][ T40] audit: type=1326 audit(3132.779:102950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.769715][ T40] audit: type=1326 audit(3132.779:102951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.797092][ T40] audit: type=1326 audit(3132.779:102952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.815452][ T40] audit: type=1326 audit(3132.779:102953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.834887][ T40] audit: type=1326 audit(3132.799:102954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.6.15059" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 2875.869650][T26973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15060'. [ 2875.874961][T26973] PKCS8: Unsupported PKCS#8 version [ 2875.963811][T17284] usb usb52-port1: attempt power cycle [ 2875.996960][T26960] vhci_hcd: connection reset by peer [ 2875.999314][T12083] vhci_hcd vhci_hcd.1: stop threads [ 2876.001251][T12083] vhci_hcd vhci_hcd.1: release socket [ 2876.004594][T12083] vhci_hcd vhci_hcd.1: disconnect device [ 2876.114138][T26978] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2876.116505][T26978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2876.121107][T26978] vhci_hcd vhci_hcd.0: Device attached [ 2876.393677][T17299] usb 50-1: SetAddress Request (24) to port 0 [ 2876.396184][T17299] usb 50-1: new SuperSpeed USB device number 24 using vhci_hcd [ 2876.563623][T17284] usb usb52-port1: unable to enumerate USB device [ 2876.603056][T26979] vhci_hcd: connection reset by peer [ 2876.605332][ T8729] vhci_hcd vhci_hcd.6: stop threads [ 2876.607075][ T8729] vhci_hcd vhci_hcd.6: release socket [ 2876.609109][ T8729] vhci_hcd vhci_hcd.6: disconnect device [ 2877.418986][T26996] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2877.560747][T27000] input: syz1 as /devices/virtual/input/input464 [ 2880.793423][T14418] usb 40-1: device descriptor read/8, error -110 [ 2881.437249][T17299] usb 50-1: device descriptor read/8, error -110 [ 2881.553731][T14418] usb usb40-port1: attempt power cycle [ 2881.824599][T17299] usb usb50-port1: attempt power cycle [ 2881.890517][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 2881.890533][ T40] audit: type=1326 audit(3138.939:102982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2881.906604][ T40] audit: type=1326 audit(3138.959:102983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2881.914848][ T40] audit: type=1326 audit(3138.969:102984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2881.923813][ T40] audit: type=1326 audit(3138.969:102985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2881.934650][ T40] audit: type=1326 audit(3138.969:102986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2881.946406][ T40] audit: type=1326 audit(3138.969:102987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2882.001698][ T40] audit: type=1326 audit(3138.979:102988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2882.017354][ T40] audit: type=1326 audit(3138.979:102989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2882.026922][ T40] audit: type=1326 audit(3138.979:102990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2882.035745][ T40] audit: type=1326 audit(3138.989:102991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27044 comm="syz.7.15077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 2882.046614][T27047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15078'. [ 2882.114025][T14418] usb usb40-port1: unable to enumerate USB device [ 2882.204358][T27052] input: syz1 as /devices/virtual/input/input465 [ 2882.415949][T17299] usb usb50-port1: unable to enumerate USB device [ 2882.994242][T27057] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 2882.996395][T27057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2882.999078][T27057] vhci_hcd vhci_hcd.0: Device attached [ 2883.294146][T27059] vhci_hcd: connection closed [ 2883.296679][T12083] vhci_hcd vhci_hcd.7: stop threads [ 2883.300062][T12083] vhci_hcd vhci_hcd.7: release socket [ 2883.303500][ T8779] usb 52-1: SetAddress Request (29) to port 0 [ 2883.305534][ T8779] usb 52-1: new SuperSpeed USB device number 29 using vhci_hcd [ 2883.314551][T27065] tmpfs: Bad value for 'mpol' [ 2883.323788][T12083] vhci_hcd vhci_hcd.7: disconnect device [ 2883.783086][T27073] siw: device registration error -23 [ 2885.439340][T27085] FAULT_INJECTION: forcing a failure. [ 2885.439340][T27085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2885.453451][T27085] CPU: 3 UID: 0 PID: 27085 Comm: syz.1.15088 Tainted: G L syzkaller #0 PREEMPT(full) [ 2885.453480][T27085] Tainted: [L]=SOFTLOCKUP [ 2885.453486][T27085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2885.453496][T27085] Call Trace: [ 2885.453502][T27085] [ 2885.453509][T27085] dump_stack_lvl+0x100/0x190 [ 2885.453553][T27085] should_fail_ex.cold+0x5/0xa [ 2885.453578][T27085] _copy_from_user+0x2e/0xd0 [ 2885.453608][T27085] __sys_bpf+0x243/0x5050 [ 2885.453629][T27085] ? __pfx___sys_bpf+0x10/0x10 [ 2885.453646][T27085] ? proc_fail_nth_write+0x9f/0x220 [ 2885.453665][T27085] ? find_held_lock+0x2b/0x80 [ 2885.453686][T27085] ? find_held_lock+0x2b/0x80 [ 2885.453702][T27085] ? ksys_write+0x190/0x250 [ 2885.453727][T27085] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2885.453773][T27085] ? fput+0x79/0x100 [ 2885.453795][T27085] ? ksys_write+0x1ac/0x250 [ 2885.453818][T27085] __ia32_sys_bpf+0x79/0xf0 [ 2885.453839][T27085] ? lockdep_hardirqs_on+0x78/0x100 [ 2885.453860][T27085] __do_fast_syscall_32+0xde/0x660 [ 2885.453884][T27085] do_fast_syscall_32+0x32/0x70 [ 2885.453912][T27085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2885.453934][T27085] RIP: 0023:0xf748d579 [ 2885.453949][T27085] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 2885.453966][T27085] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 2885.453985][T27085] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000280 [ 2885.453996][T27085] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2885.454006][T27085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2885.454017][T27085] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2885.454027][T27085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2885.454051][T27085] [ 2885.671952][T27091] input: syz1 as /devices/virtual/input/input466 [ 2886.371749][T27100] input: syz1 as /devices/virtual/input/input467 [ 2887.695776][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 2887.695790][ T40] audit: type=1326 audit(3144.749:103015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.708437][ T40] audit: type=1326 audit(3144.749:103016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.718048][ T40] audit: type=1326 audit(3144.759:103017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.745308][ T40] audit: type=1326 audit(3144.759:103018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.770069][ T40] audit: type=1326 audit(3144.759:103019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.779972][ T40] audit: type=1326 audit(3144.759:103020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.789410][ T40] audit: type=1326 audit(3144.759:103021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.824097][ T40] audit: type=1326 audit(3144.759:103022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.845266][ T40] audit: type=1326 audit(3144.769:103023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2887.860450][ T40] audit: type=1326 audit(3144.769:103024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27115 comm="syz.2.15096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2888.117808][T15355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2888.122986][T15355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2888.126215][T15355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2888.129143][T15355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2888.131816][T15355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2888.144134][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2888.159161][T25513] bond0: (slave syz_tun): Releasing backup interface [ 2888.159887][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2888.165718][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2888.169064][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2888.174162][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2888.404360][ T8779] usb 52-1: device descriptor read/8, error -110 [ 2888.545690][T27134] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2888.548584][T27134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2888.569732][T27134] vhci_hcd vhci_hcd.0: Device attached [ 2888.603030][ T3703] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2888.626096][ T3703] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2888.783851][T27137] vhci_hcd: connection closed [ 2888.792173][ T3704] vhci_hcd vhci_hcd.2: stop threads [ 2888.794022][ T3703] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2888.796347][ T8779] usb usb52-port1: attempt power cycle [ 2888.799234][ T3703] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2888.801663][ T3704] vhci_hcd vhci_hcd.2: release socket [ 2888.807022][ T3704] vhci_hcd vhci_hcd.2: disconnect device [ 2888.968387][ T3703] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2888.971722][ T3703] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2889.047440][T27146] bridge2: entered promiscuous mode [ 2889.049677][T27146] bridge2: entered allmulticast mode [ 2889.067573][ T3703] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2889.070671][ T3703] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2889.084727][T27121] chnl_net:caif_netlink_parms(): no params data found [ 2889.188760][T27121] bridge0: port 1(bridge_slave_0) entered blocking state [ 2889.191100][T27121] bridge0: port 1(bridge_slave_0) entered disabled state [ 2889.193508][T27121] bridge_slave_0: entered allmulticast mode [ 2889.196166][T27121] bridge_slave_0: entered promiscuous mode [ 2889.199556][T27121] bridge0: port 2(bridge_slave_1) entered blocking state [ 2889.201863][T27121] bridge0: port 2(bridge_slave_1) entered disabled state [ 2889.205134][T27121] bridge_slave_1: entered allmulticast mode [ 2889.208860][T27121] bridge_slave_1: entered promiscuous mode [ 2889.266270][ T3703] bridge_slave_1: left allmulticast mode [ 2889.268149][ T3703] bridge_slave_1: left promiscuous mode [ 2889.270034][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 2889.274616][ T3703] bridge_slave_0: left allmulticast mode [ 2889.276633][ T3703] bridge_slave_0: left promiscuous mode [ 2889.278461][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 2889.363460][ T8779] usb usb52-port1: unable to enumerate USB device [ 2889.409664][T27154] siw: device registration error -23 [ 2889.826571][ T3703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2889.834126][ T3703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2889.839401][ T3703] bond0 (unregistering): Released all slaves [ 2890.132118][ T3703] bond1 (unregistering): Released all slaves [ 2890.188002][T27159] input: syz1 as /devices/virtual/input/input468 [ 2890.233798][ T64] Bluetooth: hci3: command tx timeout [ 2890.310777][ T3703] bond2 (unregistering): Released all slaves [ 2890.917693][T27121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2890.935108][ T3703] tipc: Left network mode [ 2891.104138][T27121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2891.789591][T27173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15106'. [ 2891.865800][T27121] team0: Port device team_slave_0 added [ 2891.884149][T27121] team0: Port device team_slave_1 added [ 2891.899342][T27121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2891.901850][T27121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2891.910278][T27121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2891.943400][T27121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2891.945681][T27121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2891.957054][T27121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2891.990601][T27121] hsr_slave_0: entered promiscuous mode [ 2891.993325][T27121] hsr_slave_1: entered promiscuous mode [ 2891.996209][T27121] debugfs: 'hsr0' already exists in 'hsr' [ 2891.998395][T27121] Cannot create hsr debugfs directory [ 2892.039176][T27180] input: syz1 as /devices/virtual/input/input469 [ 2892.045924][T27179] FAULT_INJECTION: forcing a failure. [ 2892.045924][T27179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2892.051299][T27179] CPU: 2 UID: 0 PID: 27179 Comm: syz.6.15108 Tainted: G L syzkaller #0 PREEMPT(full) [ 2892.051320][T27179] Tainted: [L]=SOFTLOCKUP [ 2892.051324][T27179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2892.051331][T27179] Call Trace: [ 2892.051335][T27179] [ 2892.051340][T27179] dump_stack_lvl+0x100/0x190 [ 2892.051357][T27179] should_fail_ex.cold+0x5/0xa [ 2892.051376][T27179] _copy_from_user+0x2e/0xd0 [ 2892.051394][T27179] bpf_test_init.isra.0+0xaf/0x100 [ 2892.051412][T27179] bpf_prog_test_run_xdp+0x57e/0x1670 [ 2892.051434][T27179] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2892.051455][T27179] ? fput+0x79/0x100 [ 2892.051470][T27179] ? __bpf_prog_get+0x97/0x2a0 [ 2892.051487][T27179] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2892.051504][T27179] __sys_bpf+0x1e56/0x5050 [ 2892.051519][T27179] ? __pfx___sys_bpf+0x10/0x10 [ 2892.051532][T27179] ? proc_fail_nth_write+0x9f/0x220 [ 2892.051546][T27179] ? find_held_lock+0x2b/0x80 [ 2892.051560][T27179] ? find_held_lock+0x2b/0x80 [ 2892.051571][T27179] ? ksys_write+0x190/0x250 [ 2892.051585][T27179] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2892.051608][T27179] ? fput+0x79/0x100 [ 2892.051622][T27179] ? ksys_write+0x1ac/0x250 [ 2892.051637][T27179] __ia32_sys_bpf+0x79/0xf0 [ 2892.051650][T27179] ? lockdep_hardirqs_on+0x78/0x100 [ 2892.051663][T27179] __do_fast_syscall_32+0xde/0x660 [ 2892.051678][T27179] do_fast_syscall_32+0x32/0x70 [ 2892.051692][T27179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2892.051706][T27179] RIP: 0023:0xf7fc2579 [ 2892.051715][T27179] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 2892.051726][T27179] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 2892.051737][T27179] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000280 [ 2892.051744][T27179] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2892.051750][T27179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2892.051756][T27179] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2892.051763][T27179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2892.051776][T27179] [ 2892.187144][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15110'. [ 2892.315304][ T64] Bluetooth: hci3: command tx timeout [ 2892.514228][ T3703] hsr_slave_0: left promiscuous mode [ 2892.520166][ T3703] hsr_slave_1: left promiscuous mode [ 2892.522471][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2892.535899][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2892.551786][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2892.572935][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2892.604985][ T3703] veth1_macvtap: left promiscuous mode [ 2892.606688][ T3703] veth0_macvtap: left promiscuous mode [ 2892.608551][ T3703] veth1_vlan: left promiscuous mode [ 2892.610286][ T3703] veth0_vlan: left promiscuous mode [ 2893.652729][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 2893.652740][ T40] audit: type=1326 audit(3150.699:103048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27210 comm="syz.2.15116" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2579 code=0x0 [ 2893.684969][T27216] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2893.687696][T27216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2893.691274][T27216] vhci_hcd vhci_hcd.0: Device attached [ 2893.859126][T27217] vhci_hcd: connection closed [ 2893.859562][T22666] vhci_hcd vhci_hcd.6: stop threads [ 2893.863679][T22666] vhci_hcd vhci_hcd.6: release socket [ 2893.865889][T22666] vhci_hcd vhci_hcd.6: disconnect device [ 2894.397201][ T64] Bluetooth: hci3: command tx timeout [ 2894.778870][T27244] input: syz1 as /devices/virtual/input/input470 [ 2895.090413][ T3703] IPVS: stop unused estimator thread 0... [ 2895.363667][T27121] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2895.381454][T27121] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2895.411166][T27121] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2895.433363][T27121] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2895.739599][T27121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2895.768785][T27121] 8021q: adding VLAN 0 to HW filter on device team0 [ 2895.776881][T12083] bridge0: port 1(bridge_slave_0) entered blocking state [ 2895.779155][T12083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2895.800696][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 2895.803053][T12083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2896.113866][T27286] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.15130'. [ 2896.240563][T27121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2896.379961][T27121] veth0_vlan: entered promiscuous mode [ 2896.403760][T27121] veth1_vlan: entered promiscuous mode [ 2896.427589][T27121] veth0_macvtap: entered promiscuous mode [ 2896.432652][T27121] veth1_macvtap: entered promiscuous mode [ 2896.446344][T27121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2896.452733][T27121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2896.460880][T22666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2896.466287][T22666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2896.474952][ T64] Bluetooth: hci3: command tx timeout [ 2896.475224][T22666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2896.480599][T22666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2896.534450][T22666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2896.536968][T22666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2896.563398][T12083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2896.566000][T12083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2896.619127][T27292] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2896.621607][T27293] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2898.161421][T27316] input: syz1 as /devices/virtual/input/input471 [ 2898.635481][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15137'. [ 2898.639375][T27321] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15137'. [ 2899.065746][T27324] netlink: 'syz.6.15138': attribute type 4 has an invalid length. [ 2899.123032][T27324] netlink: 'syz.6.15138': attribute type 4 has an invalid length. [ 2899.269847][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15141'. [ 2899.826117][ T64] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 2899.966244][T27351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15149'. [ 2900.011750][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15151'. [ 2900.053001][ T8615] usb 11-1: new low-speed USB device number 52 using dummy_hcd [ 2900.062632][T27357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15152'. [ 2900.066505][T27357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15152'. [ 2900.286537][ T8615] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2900.289428][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2900.294260][ T8615] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2900.299290][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2900.304309][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2900.313565][ T8615] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2900.339648][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2900.343232][ T8615] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2900.347570][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2900.351405][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2900.357349][ T8615] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2900.361157][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2900.365824][ T8615] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2900.369893][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2900.373726][ T8615] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2900.373896][T27289] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2900.386285][ T8615] usb 11-1: string descriptor 0 read error: -22 [ 2900.389744][ T8615] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2900.393409][ T8615] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2900.416447][ T8615] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2900.543057][T27289] usb 6-1: Using ep0 maxpacket: 16 [ 2900.547732][T27289] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 2900.551355][T27289] usb 6-1: config 0 has no interface number 0 [ 2900.557165][T27289] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2900.561225][T27289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2900.565034][T27289] usb 6-1: Product: syz [ 2900.567059][T27289] usb 6-1: Manufacturer: syz [ 2900.569205][T27289] usb 6-1: SerialNumber: syz [ 2900.577600][T27289] usb 6-1: config 0 descriptor?? [ 2900.583206][T27289] hub 6-1:0.132: bad descriptor, ignoring hub [ 2900.585905][T27289] hub 6-1:0.132: probe with driver hub failed with error -5 [ 2900.592373][T27289] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input472 [ 2901.321018][T27289] usb 6-1: USB disconnect, device number 40 [ 2901.765787][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2902.036601][T27381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15160'. [ 2902.298625][T27394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15166'. [ 2902.302506][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15166'. [ 2902.390286][T27397] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2902.392426][T27397] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2902.400284][T27397] vhci_hcd vhci_hcd.0: Device attached [ 2902.663710][T17299] usb 40-1: SetAddress Request (83) to port 0 [ 2902.666274][T17299] usb 40-1: new SuperSpeed USB device number 83 using vhci_hcd [ 2902.804482][T27409] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2902.806831][T27409] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2902.810549][T27409] vhci_hcd vhci_hcd.0: Device attached [ 2902.855413][ T8779] usb 12-1: new high-speed USB device number 46 using dummy_hcd [ 2903.004201][ T8779] usb 12-1: Using ep0 maxpacket: 32 [ 2903.009346][ T8779] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 2903.012503][ T8779] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2903.017592][ T8779] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2903.022234][ T8779] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2903.029504][ T8779] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2903.035633][ T8779] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2903.039366][ T8779] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2903.042846][ T8779] usb 12-1: Product: syz [ 2903.048827][ T8779] usb 12-1: Manufacturer: syz [ 2903.050863][ T8779] usb 12-1: SerialNumber: syz [ 2903.055687][ T8779] usb 12-1: config 0 descriptor?? [ 2903.060652][ T8779] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2903.067129][ T8779] ldusb 12-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 2903.083707][ T4553] usb 42-1: SetAddress Request (110) to port 0 [ 2903.086407][ T4553] usb 42-1: new SuperSpeed USB device number 110 using vhci_hcd [ 2903.366262][T27398] vhci_hcd: connection reset by peer [ 2903.369263][T12083] vhci_hcd vhci_hcd.1: stop threads [ 2903.371686][T12083] vhci_hcd vhci_hcd.1: release socket [ 2903.374412][T12083] vhci_hcd vhci_hcd.1: disconnect device [ 2903.497635][T27410] vhci_hcd: connection reset by peer [ 2903.500336][ T3704] vhci_hcd vhci_hcd.2: stop threads [ 2903.502710][ T3704] vhci_hcd vhci_hcd.2: release socket [ 2903.506082][ T3704] vhci_hcd vhci_hcd.2: disconnect device [ 2904.304888][T27422] siw: device registration error -23 [ 2905.225439][ T7525] usb 12-1: USB disconnect, device number 46 [ 2905.228513][ T7525] ldusb 12-1:0.0: LD USB Device #1 now disconnected [ 2905.577011][T27434] __nla_validate_parse: 2 callbacks suppressed [ 2905.577030][T27434] netlink: 52 bytes leftover after parsing attributes in process `syz.7.15176'. [ 2905.694616][T27446] FAULT_INJECTION: forcing a failure. [ 2905.694616][T27446] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.698860][T27446] CPU: 0 UID: 0 PID: 27446 Comm: syz.7.15180 Tainted: G L syzkaller #0 PREEMPT(full) [ 2905.698879][T27446] Tainted: [L]=SOFTLOCKUP [ 2905.698883][T27446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2905.698890][T27446] Call Trace: [ 2905.698896][T27446] [ 2905.698901][T27446] dump_stack_lvl+0x100/0x190 [ 2905.698920][T27446] should_fail_ex.cold+0x5/0xa [ 2905.698939][T27446] should_failslab+0xc2/0x120 [ 2905.698955][T27446] __kmalloc_cache_noprof+0x80/0x810 [ 2905.698972][T27446] ? __xdp_reg_mem_model+0x134/0x690 [ 2905.698982][T27446] ? __xa_alloc_cyclic+0x1f2/0x330 [ 2905.698999][T27446] ? __xdp_reg_mem_model+0x134/0x690 [ 2905.699010][T27446] __xdp_reg_mem_model+0x134/0x690 [ 2905.699022][T27446] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 2905.699034][T27446] ? page_pool_list+0x223/0x2a0 [ 2905.699050][T27446] xdp_reg_mem_model+0x22/0x70 [ 2905.699061][T27446] bpf_test_run_xdp_live+0x1cb/0x760 [ 2905.699079][T27446] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2905.699100][T27446] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2905.699128][T27446] ? _copy_from_user+0x59/0xd0 [ 2905.699145][T27446] ? bpf_test_init.isra.0+0x51/0x100 [ 2905.699162][T27446] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 2905.699184][T27446] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2905.699205][T27446] ? fput+0x79/0x100 [ 2905.699220][T27446] ? __bpf_prog_get+0x97/0x2a0 [ 2905.699237][T27446] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2905.699254][T27446] __sys_bpf+0x1e56/0x5050 [ 2905.699269][T27446] ? __pfx___sys_bpf+0x10/0x10 [ 2905.699282][T27446] ? proc_fail_nth_write+0x9f/0x220 [ 2905.699296][T27446] ? find_held_lock+0x2b/0x80 [ 2905.699310][T27446] ? find_held_lock+0x2b/0x80 [ 2905.699320][T27446] ? ksys_write+0x190/0x250 [ 2905.699335][T27446] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2905.699357][T27446] ? fput+0x79/0x100 [ 2905.699372][T27446] ? ksys_write+0x1ac/0x250 [ 2905.699386][T27446] __ia32_sys_bpf+0x79/0xf0 [ 2905.699399][T27446] ? lockdep_hardirqs_on+0x78/0x100 [ 2905.699412][T27446] __do_fast_syscall_32+0xde/0x660 [ 2905.699428][T27446] do_fast_syscall_32+0x32/0x70 [ 2905.699442][T27446] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2905.699457][T27446] RIP: 0023:0xf741d579 [ 2905.699466][T27446] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 2905.699477][T27446] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 2905.699488][T27446] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000280 [ 2905.699495][T27446] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2905.699502][T27446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2905.699530][T27446] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2905.699537][T27446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2905.699552][T27446] [ 2905.788061][T27289] usb 11-1: USB disconnect, device number 52 [ 2905.926294][T27455] input: syz1 as /devices/virtual/input/input473 [ 2905.973284][T27454] serio: Serial port ptm0 [ 2906.104788][T27454] serio: Serial port ptm0 [ 2906.251479][T27462] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15184'. [ 2906.673794][T27469] input: syz1 as /devices/virtual/input/input474 [ 2906.771084][T27468] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2906.773922][T27468] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2906.958618][T27468] vhci_hcd vhci_hcd.0: Device attached [ 2907.225460][T14345] usb 50-1: SetAddress Request (29) to port 0 [ 2907.228147][T14345] usb 50-1: new SuperSpeed USB device number 29 using vhci_hcd [ 2907.545966][T27474] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15185'. [ 2907.758828][T17299] usb 40-1: device descriptor read/8, error -110 [ 2907.876765][T27500] input: syz1 as /devices/virtual/input/input475 [ 2908.172080][T27470] vhci_hcd: connection reset by peer [ 2908.175996][ T3704] vhci_hcd vhci_hcd.6: stop threads [ 2908.178249][ T3704] vhci_hcd vhci_hcd.6: release socket [ 2908.180679][ T3704] vhci_hcd vhci_hcd.6: disconnect device [ 2908.192806][ T4553] usb 42-1: device descriptor read/8, error -110 [ 2908.456365][T17299] usb usb40-port1: attempt power cycle [ 2908.477293][T27503] input: syz1 as /devices/virtual/input/input476 [ 2909.280202][T27513] input: syz1 as /devices/virtual/input/input477 [ 2909.350935][ T4553] usb usb42-port1: attempt power cycle [ 2909.434507][T17299] usb usb40-port1: unable to enumerate USB device [ 2909.467331][ T40] audit: type=1326 audit(3166.489:103049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27515 comm="syz.7.15198" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 2909.727758][T27542] input: syz1 as /devices/virtual/input/input478 [ 2910.934890][ T4553] usb usb42-port1: unable to enumerate USB device [ 2911.036459][T27544] serio: Serial port ptm0 [ 2911.198758][T27555] input: syz1 as /devices/virtual/input/input479 [ 2911.252963][T27544] serio: Serial port ptm0 [ 2911.822135][T27575] input: syz1 as /devices/virtual/input/input480 [ 2912.130444][T27579] input: syz1 as /devices/virtual/input/input481 [ 2912.313712][T14345] usb 50-1: device descriptor read/8, error -110 [ 2913.461383][T14345] usb usb50-port1: attempt power cycle [ 2913.515258][T27584] input: syz1 as /devices/virtual/input/input482 [ 2914.026520][T14345] usb usb50-port1: unable to enumerate USB device [ 2914.437616][T27591] input: syz1 as /devices/virtual/input/input483 [ 2914.721807][T27602] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15221'. [ 2914.726170][T27603] input: syz1 as /devices/virtual/input/input484 [ 2914.743669][T27602] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15221'. [ 2916.254675][T27620] input: syz1 as /devices/virtual/input/input485 [ 2916.291105][T27622] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2916.293875][T27622] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2916.310888][T27622] vhci_hcd vhci_hcd.0: Device attached [ 2916.493367][T27628] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.15226'. [ 2916.582416][T27623] vhci_hcd: connection closed [ 2916.606164][ T8727] vhci_hcd vhci_hcd.1: stop threads [ 2916.609614][ T8727] vhci_hcd vhci_hcd.1: release socket [ 2916.614780][ T8615] usb 40-1: SetAddress Request (87) to port 0 [ 2916.617731][ T8615] usb 40-1: new SuperSpeed USB device number 87 using vhci_hcd [ 2916.618066][ T8727] vhci_hcd vhci_hcd.1: disconnect device [ 2916.633484][ T8615] usb 40-1: enqueue for inactive port 0 [ 2917.034101][ T8615] usb usb40-port1: attempt power cycle [ 2917.279046][ T40] audit: type=1326 audit(3174.329:103050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27629 comm="syz.6.15227" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2579 code=0x0 [ 2917.633407][ T8615] usb usb40-port1: unable to enumerate USB device [ 2918.269745][T27650] siw: device registration error -23 [ 2919.474286][T27653] siw: device registration error -23 [ 2920.678818][T27667] input: syz1 as /devices/virtual/input/input486 [ 2920.697037][T27668] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2920.699181][T27668] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2920.702541][T27668] vhci_hcd vhci_hcd.0: Device attached [ 2920.760234][T27671] input: syz1 as /devices/virtual/input/input487 [ 2920.993243][ T8615] usb 42-1: SetAddress Request (114) to port 0 [ 2921.112291][ T8615] usb 42-1: new SuperSpeed USB device number 114 using vhci_hcd [ 2921.182295][T27676] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15234'. [ 2923.138755][T20613] udevd[20613]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2923.168604][T27669] vhci_hcd: connection reset by peer [ 2923.172059][T22666] vhci_hcd vhci_hcd.2: stop threads [ 2923.178279][T22666] vhci_hcd vhci_hcd.2: release socket [ 2923.180684][T22666] vhci_hcd vhci_hcd.2: disconnect device [ 2923.482838][T27681] input: syz1 as /devices/virtual/input/input488 [ 2925.151701][T27712] input: syz1 as /devices/virtual/input/input489 [ 2925.257922][T27709] binder: 27702:27709 ioctl 0 80000040 returned -22 [ 2925.617343][ T40] audit: type=1326 audit(3182.681:103051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.636765][ T40] audit: type=1326 audit(3182.681:103052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.643992][ T40] audit: type=1326 audit(3182.701:103053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.652463][ T40] audit: type=1326 audit(3182.701:103054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.662538][ T40] audit: type=1326 audit(3182.701:103055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.671146][ T40] audit: type=1326 audit(3182.701:103056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.713407][ T40] audit: type=1326 audit(3182.701:103057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.739281][ T40] audit: type=1326 audit(3182.701:103058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.769763][ T40] audit: type=1326 audit(3182.711:103059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2925.790937][ T40] audit: type=1326 audit(3182.711:103060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27713 comm="syz.2.15248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2926.071109][T27717] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2926.073847][T27717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2926.084002][T27717] vhci_hcd vhci_hcd.0: Device attached [ 2926.546310][T27718] vhci_hcd: connection reset by peer [ 2926.549164][ T8727] vhci_hcd vhci_hcd.2: stop threads [ 2926.551466][ T8727] vhci_hcd vhci_hcd.2: release socket [ 2926.556950][ T8615] usb 42-1: device descriptor read/8, error -110 [ 2926.556983][ T8727] vhci_hcd vhci_hcd.2: disconnect device [ 2926.958112][ T8615] usb usb42-port1: attempt power cycle [ 2927.570919][ T8615] usb usb42-port1: unable to enumerate USB device [ 2927.610884][T27732] input: syz1 as /devices/virtual/input/input490 [ 2928.123859][T27742] netlink: 'syz.7.15253': attribute type 1 has an invalid length. [ 2928.132700][T27739] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2928.134908][T27739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2928.137689][T27739] vhci_hcd vhci_hcd.0: Device attached [ 2928.155123][T27742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2928.399160][T27743] vhci_hcd: connection closed [ 2928.399871][T22666] vhci_hcd vhci_hcd.6: stop threads [ 2928.403953][T22666] vhci_hcd vhci_hcd.6: release socket [ 2928.405753][T22666] vhci_hcd vhci_hcd.6: disconnect device [ 2928.423140][ T8615] usb 50-1: enqueue for inactive port 0 [ 2929.075217][ T8615] usb usb50-port1: attempt power cycle [ 2929.082714][T27752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2929.084812][T27752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2929.259747][T27752] vhci_hcd vhci_hcd.0: Device attached [ 2929.424580][T27752] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15255'. [ 2929.533140][ T7525] usb 40-1: SetAddress Request (91) to port 0 [ 2929.543023][ T7525] usb 40-1: new SuperSpeed USB device number 91 using vhci_hcd [ 2929.770249][T27753] vhci_hcd: connection reset by peer [ 2929.774243][T12083] vhci_hcd vhci_hcd.1: stop threads [ 2929.777280][T12083] vhci_hcd vhci_hcd.1: release socket [ 2929.780032][T12083] vhci_hcd vhci_hcd.1: disconnect device [ 2929.844332][ T8615] usb usb50-port1: unable to enumerate USB device [ 2929.855626][T27761] input: syz1 as /devices/virtual/input/input491 [ 2930.851125][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 2930.851136][ T40] audit: type=1326 audit(3187.917:103093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2930.861034][ T40] audit: type=1326 audit(3187.927:103094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2930.868707][ T40] audit: type=1326 audit(3187.937:103095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2930.878407][ T40] audit: type=1326 audit(3187.937:103096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2930.888778][ T40] audit: type=1326 audit(3187.937:103097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2930.899460][ T40] audit: type=1326 audit(3187.947:103098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 2930.907690][T27780] input: syz1 as /devices/virtual/input/input492 [ 2930.915301][ T40] audit: type=1326 audit(3187.947:103099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71e572b code=0x7ffc0000 [ 2930.922382][ T40] audit: type=1326 audit(3187.947:103100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71e572b code=0x7ffc0000 [ 2930.973913][ T40] audit: type=1326 audit(3187.947:103101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71e572b code=0x7ffc0000 [ 2930.983113][ T40] audit: type=1326 audit(3187.947:103102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27778 comm="syz.2.15264" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71e572b code=0x7ffc0000 [ 2931.869344][T27798] input: syz1 as /devices/virtual/input/input493 [ 2932.398966][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15269'. [ 2932.401841][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15269'. [ 2932.415605][T27802] netlink: 'syz.6.15269': attribute type 1 has an invalid length. [ 2933.069423][T27813] input: syz1 as /devices/virtual/input/input494 [ 2933.170958][T27818] siw: device registration error -23 [ 2934.555980][T15355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2934.562287][T15355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2934.567001][T15355] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2934.579844][T15355] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2934.583641][T15355] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2934.633112][ T7525] usb 40-1: device descriptor read/8, error -110 [ 2934.658777][T27833] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2934.660871][T27833] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2934.686551][T27833] vhci_hcd vhci_hcd.0: Device attached [ 2934.721313][T27834] warn_alloc: 2 callbacks suppressed [ 2934.721330][T27834] syz-executor: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2934.729790][T27834] CPU: 2 UID: 0 PID: 27834 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2934.729810][T27834] Tainted: [L]=SOFTLOCKUP [ 2934.729814][T27834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2934.729820][T27834] Call Trace: [ 2934.729825][T27834] [ 2934.729830][T27834] dump_stack_lvl+0x100/0x190 [ 2934.729848][T27834] warn_alloc.cold+0x95/0x1c1 [ 2934.729867][T27834] ? __pfx_warn_alloc+0x10/0x10 [ 2934.729881][T27834] ? __alloc_pages_direct_compact+0x3fe/0x550 [ 2934.729896][T27834] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 2934.729911][T27834] ? psi_memstall_leave+0x1e2/0x2e0 [ 2934.729925][T27834] ? lockdep_hardirqs_on+0x78/0x100 [ 2934.729941][T27834] __alloc_frozen_pages_noprof+0x1442/0x2410 [ 2934.729961][T27834] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 2934.729977][T27834] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2934.729992][T27834] ? internal_create_group+0x915/0xf40 [ 2934.730011][T27834] ? __pfx_internal_create_group+0x10/0x10 [ 2934.730027][T27834] ? __pfx_kobject_add+0x10/0x10 [ 2934.730044][T27834] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2934.730057][T27834] ? policy_nodemask+0xed/0x4f0 [ 2934.730075][T27834] alloc_pages_mpol+0x1fb/0x550 [ 2934.730092][T27834] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2934.730112][T27834] ___kmalloc_large_node+0x104/0x150 [ 2934.730131][T27834] __kmalloc_large_node_noprof+0x1c/0x70 [ 2934.730149][T27834] ? ib_setup_port_attrs+0x2b4/0x600 [ 2934.730171][T27834] __kmalloc_noprof+0x6b1/0x9c0 [ 2934.730185][T27834] ? rxe_get_link_layer+0x64/0xc0 [ 2934.730202][T27834] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 2934.730217][T27834] ? rdma_port_get_link_layer+0x57/0xe0 [ 2934.730238][T27834] ? ib_setup_port_attrs+0x2b4/0x600 [ 2934.730260][T27834] ib_setup_port_attrs+0x2b4/0x600 [ 2934.730283][T27834] ? kobject_put+0xb9/0x640 [ 2934.730305][T27834] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 2934.730335][T27834] ? __init_waitqueue_head+0xca/0x150 [ 2934.730363][T27834] add_one_compat_dev+0x5b3/0x820 [ 2934.730408][T27834] rdma_dev_init_net+0x30a/0x590 [ 2934.730428][T27834] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 2934.730450][T27834] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 2934.730467][T27834] ops_init+0x1e2/0x5f0 [ 2934.730494][T27834] setup_net+0x118/0x3a0 [ 2934.730516][T27834] ? __pfx_setup_net+0x10/0x10 [ 2934.730541][T27834] ? lockdep_init_map_type+0x5c/0x250 [ 2934.730561][T27834] ? mutex_init_lockep+0x110/0x150 [ 2934.730586][T27834] copy_net_ns+0x46f/0x7c0 [ 2934.730605][T27834] create_new_namespaces+0x3ea/0xab0 [ 2934.730628][T27834] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 2934.730648][T27834] ksys_unshare+0x455/0xab0 [ 2934.730672][T27834] ? __pfx_ksys_unshare+0x10/0x10 [ 2934.730693][T27834] ? fput_close_sync+0x11d/0x250 [ 2934.730717][T27834] ? __pfx_fput_close_sync+0x10/0x10 [ 2934.730744][T27834] __ia32_sys_unshare+0x30/0x40 [ 2934.730765][T27834] __do_fast_syscall_32+0xde/0x660 [ 2934.730787][T27834] do_fast_syscall_32+0x32/0x70 [ 2934.730806][T27834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2934.730826][T27834] RIP: 0023:0xf73cd579 [ 2934.730838][T27834] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 2934.730853][T27834] RSP: 002b:00000000ffe5715c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 2934.730868][T27834] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2934.730878][T27834] RDX: 00000000f73bbff4 RSI: 00000000f73f4f40 RDI: 00000000f73f54a8 [ 2934.730888][T27834] RBP: 00000000ffe57288 R08: 0000000000000000 R09: 0000000000000000 [ 2934.730897][T27834] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2934.730907][T27834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2934.730929][T27834] [ 2934.730936][T27834] Mem-Info: [ 2934.792001][T27833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15276'. [ 2934.799011][T27834] active_anon:3238 inactive_anon:1903 isolated_anon:0 [ 2934.799011][T27834] active_file:1044 inactive_file:1082 isolated_file:0 [ 2934.799011][T27834] unevictable:1774 dirty:19 writeback:0 [ 2934.799011][T27834] slab_reclaimable:7397 slab_unreclaimable:78883 [ 2934.799011][T27834] mapped:25618 shmem:4639 pagetables:1937 [ 2934.799011][T27834] sec_pagetables:347 bounce:0 [ 2934.799011][T27834] kernel_misc_reclaimable:0 [ 2934.799011][T27834] free:41498 free_pcp:485 free_cma:0 [ 2934.908030][T27834] Node 0 active_anon:512kB inactive_anon:48kB active_file:932kB inactive_file:304kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9344kB pagetables:1536kB sec_pagetables:1184kB all_unreclaimable? yes Balloon:0kB [ 2934.921326][T27834] Node 1 active_anon:1512kB inactive_anon:18492kB active_file:2964kB inactive_file:3012kB unevictable:3560kB isolated(anon):0kB isolated(file):0kB mapped:102344kB dirty:44kB writeback:0kB shmem:15100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6620kB pagetables:6108kB sec_pagetables:204kB all_unreclaimable? no Balloon:0kB [ 2934.934547][T27834] Node 0 DMA free:2172kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:96kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:80kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.947665][T27834] lowmem_reserve[]: 0 288 288 288 288 [ 2934.950059][T27834] Node 0 DMA32 free:24980kB boost:20480kB min:33700kB low:37004kB high:40308kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:460kB inactive_anon:48kB active_file:836kB inactive_file:300kB unevictable:3536kB writepending:0kB zspages:1524kB present:1032196kB managed:295116kB mlocked:0kB bounce:0kB free_pcp:776kB local_pcp:0kB free_cma:0kB [ 2934.965075][T27834] lowmem_reserve[]: 0 0 0 0 0 [ 2934.967267][T27834] Node 1 DMA32 free:142604kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:748KB active_anon:1512kB inactive_anon:18492kB active_file:2964kB inactive_file:3012kB unevictable:3560kB writepending:12kB zspages:6744kB present:1048432kB managed:948212kB mlocked:24kB bounce:0kB free_pcp:11960kB local_pcp:756kB free_cma:0kB [ 2934.984216][T27834] lowmem_reserve[]: 0 0 0 0 0 [ 2934.986455][T27834] Node 0 DMA: 31*4kB (UM) 18*8kB (UM) 5*16kB (UM) 7*32kB (UM) 7*64kB (UM) 1*128kB (M) 0*256kB 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2172kB [ 2934.992754][T27834] Node 0 DMA32: 567*4kB (UM) 553*8kB (UME) 256*16kB (UM) 192*32kB (UM) 60*64kB (UM) 11*128kB (UM) 11*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24996kB [ 2934.999615][T27834] Node 1 DMA32: 1017*4kB (UMEH) 4097*8kB (UMEH) 6046*16kB (UMEH) 223*32kB (UME) 26*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 142508kB [ 2935.007277][T27834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2935.011427][T27834] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2935.020470][T27834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2935.024934][T27834] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2935.028978][T27834] 7835 total pagecache pages [ 2935.031030][T27834] 1377 pages in swap cache [ 2935.033544][ T7525] usb usb40-port1: attempt power cycle [ 2935.035723][T27834] Free swap = 48484kB [ 2935.035736][T27834] Total swap = 124996kB [ 2935.035745][T27834] 524155 pages RAM [ 2935.035752][T27834] 0 pages HighMem/MovableOnly [ 2935.035758][T27834] 209483 pages reserved [ 2935.045764][T14345] usb 42-1: SetAddress Request (118) to port 0 [ 2935.048502][T14345] usb 42-1: new SuperSpeed USB device number 118 using vhci_hcd [ 2935.051904][T27834] 0 pages cma reserved [ 2935.100243][T27836] vhci_hcd: connection reset by peer [ 2935.102539][T22666] vhci_hcd vhci_hcd.2: stop threads [ 2935.104659][T22666] vhci_hcd vhci_hcd.2: release socket [ 2935.106422][T22666] vhci_hcd vhci_hcd.2: disconnect device [ 2935.378972][T22243] bond0: (slave syz_tun): Releasing backup interface [ 2935.390913][T22243] syz_tun (unregistering): left promiscuous mode [ 2935.393655][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15280'. [ 2935.397480][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15280'. [ 2935.401499][T19344] smc: removing ib device syz1 [ 2935.416282][T27841] netlink: 'syz.1.15280': attribute type 1 has an invalid length. [ 2935.603728][ T7525] usb usb40-port1: unable to enumerate USB device [ 2935.643379][T27850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15283'. [ 2935.755236][T27851] input: syz1 as /devices/virtual/input/input495 [ 2935.887957][T27834] chnl_net:caif_netlink_parms(): no params data found [ 2936.459177][T27858] binder: 27854:27858 ioctl 0 80000040 returned -22 [ 2936.777654][ T64] Bluetooth: hci4: command tx timeout [ 2937.042392][T27874] QAT: failed to copy from user. [ 2937.270017][T27834] bridge0: port 1(bridge_slave_0) entered blocking state [ 2937.275362][T27834] bridge0: port 1(bridge_slave_0) entered disabled state [ 2937.277365][T27884] input: syz1 as /devices/virtual/input/input496 [ 2937.283211][T27834] bridge_slave_0: entered allmulticast mode [ 2937.295537][T27834] bridge_slave_0: entered promiscuous mode [ 2937.311732][T27834] bridge0: port 2(bridge_slave_1) entered blocking state [ 2937.316341][T27834] bridge0: port 2(bridge_slave_1) entered disabled state [ 2937.319412][T27834] bridge_slave_1: entered allmulticast mode [ 2937.337768][T27834] bridge_slave_1: entered promiscuous mode [ 2937.567673][T27834] team0: Port device team_slave_0 added [ 2937.658312][T27834] team0: Port device team_slave_1 added [ 2937.794061][T27834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2937.797374][T27834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2937.808918][T27834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2937.828090][T27834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2937.831020][T27834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2937.841904][T27834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2938.092447][T27834] hsr_slave_0: entered promiscuous mode [ 2938.108402][T27834] hsr_slave_1: entered promiscuous mode [ 2938.111317][T27834] debugfs: 'hsr0' already exists in 'hsr' [ 2938.116055][T27834] Cannot create hsr debugfs directory [ 2938.426910][T27903] input: syz1 as /devices/virtual/input/input497 [ 2938.508557][ T8734] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2938.793020][ T64] Bluetooth: hci4: command tx timeout [ 2939.170799][ T8734] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2939.518810][ T8734] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2939.575294][T27920] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2939.577602][T27920] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2939.582586][T27920] vhci_hcd vhci_hcd.0: Device attached [ 2939.610966][ T8734] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2939.688245][T27920] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15294'. [ 2939.874077][ T8734] bridge_slave_1: left allmulticast mode [ 2939.876518][ T8734] bridge_slave_1: left promiscuous mode [ 2939.881505][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2939.883007][ T8615] usb 50-1: SetAddress Request (37) to port 0 [ 2939.888271][ T8734] bridge_slave_0: left allmulticast mode [ 2939.890820][ T8734] bridge_slave_0: left promiscuous mode [ 2939.893150][ T8615] usb 50-1: new SuperSpeed USB device number 37 using vhci_hcd [ 2939.897282][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2939.906189][ T8734] batman_adv: batadv0: Interface deactivated: gretap1 [ 2940.073927][T14345] usb 42-1: device descriptor read/8, error -110 [ 2940.172299][ T8734] batman_adv: batadv0: Removing interface: gretap1 [ 2940.318873][T27938] input: syz1 as /devices/virtual/input/input498 [ 2940.459193][ T8734] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2940.462609][ T8734] bridge1 (unregistering): left promiscuous mode [ 2940.469144][T14345] usb usb42-port1: attempt power cycle [ 2940.546297][ T8734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2940.549687][ T8734] bond_slave_0: left promiscuous mode [ 2940.554701][ T8734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2940.559314][ T8734] bond_slave_1: left promiscuous mode [ 2940.574271][ T8734] bond0 (unregistering): Released all slaves [ 2940.737981][ T8734] bond1 (unregistering): Released all slaves [ 2940.745173][ T8734] bond2 (unregistering): Released all slaves [ 2940.820350][ T8734] bond3 (unregistering): Released all slaves [ 2940.883257][ T64] Bluetooth: hci4: command tx timeout [ 2941.017594][ T8734] bond4 (unregistering): Released all slaves [ 2941.035264][T14345] usb usb42-port1: unable to enumerate USB device [ 2941.058377][T27921] vhci_hcd: connection reset by peer [ 2941.061778][ T3703] vhci_hcd vhci_hcd.6: stop threads [ 2941.066402][ T3703] vhci_hcd vhci_hcd.6: release socket [ 2941.071416][ T3703] vhci_hcd vhci_hcd.6: disconnect device [ 2941.621411][ T8734] batadv0: left promiscuous mode [ 2941.632828][ T8734] hsr_slave_0: left promiscuous mode [ 2941.656011][ T8734] hsr_slave_1: left promiscuous mode [ 2941.688320][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2941.694586][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2941.718451][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2941.721717][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2941.755088][ T8734] veth1_macvtap: left promiscuous mode [ 2941.757573][ T8734] veth0_macvtap: left promiscuous mode [ 2941.760170][ T8734] veth1_vlan: left promiscuous mode [ 2941.762546][ T8734] veth0_vlan: left promiscuous mode [ 2942.160212][ T8734] team0 (unregistering): Port device batadv1 removed [ 2942.790867][ T8734] team0 (unregistering): Port device team_slave_1 removed [ 2942.852339][ T8734] team0 (unregistering): Port device team_slave_0 removed [ 2942.963093][ T64] Bluetooth: hci4: command tx timeout [ 2943.542667][T27834] netdevsim netdevsim7 netdevsim0: renamed from eth6 [ 2943.566567][T27834] netdevsim netdevsim7 netdevsim1: renamed from eth7 [ 2943.579178][T27834] netdevsim netdevsim7 netdevsim2: renamed from eth8 [ 2943.599195][T27834] netdevsim netdevsim7 netdevsim3: renamed from eth9 [ 2943.611773][T27965] input: syz1 as /devices/virtual/input/input499 [ 2943.663909][T27971] input: syz1 as /devices/virtual/input/input500 [ 2944.682391][T27834] 8021q: adding VLAN 0 to HW filter on device team0 [ 2944.828121][T27989] netlink: 'syz.1.15315': attribute type 4 has an invalid length. [ 2944.831014][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15315'. [ 2944.953246][ T8615] usb 50-1: device descriptor read/8, error -110 [ 2945.051277][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.054147][ T8727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2945.068736][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.071447][ T8727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2945.385815][ T8615] usb usb50-port1: attempt power cycle [ 2945.794561][T27834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2945.963953][ T8615] usb usb50-port1: unable to enumerate USB device [ 2946.186635][T27834] veth0_vlan: entered promiscuous mode [ 2946.208726][T27834] veth1_vlan: entered promiscuous mode [ 2946.355263][T27834] veth0_macvtap: entered promiscuous mode [ 2946.377905][T28019] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2946.380741][T28019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2946.401206][T28019] vhci_hcd vhci_hcd.0: Device attached [ 2946.409000][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 2946.409011][ T40] audit: type=1326 audit(3203.477:103148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28024 comm="syz.6.15321" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2579 code=0x0 [ 2946.410655][T27834] veth1_macvtap: entered promiscuous mode [ 2946.571978][T27834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2946.618728][T27834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2946.670733][T22666] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.673999][T28019] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15314'. [ 2946.676279][T22666] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.682980][ T7525] usb 42-1: SetAddress Request (122) to port 0 [ 2946.685405][ T7525] usb 42-1: new SuperSpeed USB device number 122 using vhci_hcd [ 2946.689106][T22666] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.727684][T22666] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.737886][T22666] netdevsim netdevsim4 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.742823][T22666] netdevsim netdevsim4 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.771061][T22666] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.775771][T22666] netdevsim netdevsim4 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.809833][T22666] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.815775][T22666] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.837832][T22666] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.842857][T22666] netdevsim netdevsim8 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.847485][T22666] netdevsim netdevsim0 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.850493][T22666] netdevsim netdevsim0 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.857411][T22666] netdevsim netdevsim0 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.861633][T22666] netdevsim netdevsim0 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.886764][T22666] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.896049][T22666] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.900536][T22666] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.924406][T22666] netdevsim netdevsim9 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.939035][T22666] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.952045][T22666] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.956682][T22666] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2946.968685][T12083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2946.983404][T12083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2947.006407][T22666] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2947.055183][T28026] vhci_hcd: connection reset by peer [ 2947.057748][ T8729] vhci_hcd vhci_hcd.2: stop threads [ 2947.059441][ T8729] vhci_hcd vhci_hcd.2: release socket [ 2947.061244][ T8729] vhci_hcd vhci_hcd.2: disconnect device [ 2947.075443][T28032] input: syz1 as /devices/virtual/input/input501 [ 2947.256678][ T8729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2947.268017][ T8729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2947.347057][T28038] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15323'. [ 2948.293297][T28040] input: syz1 as /devices/virtual/input/input502 [ 2948.477501][T28046] input: syz1 as /devices/virtual/input/input503 [ 2948.673952][T28050] loop5: detected capacity change from 0 to 2640 [ 2948.677958][T27916] buffer_io_error: 56 callbacks suppressed [ 2948.677974][T27916] Buffer I/O error on dev loop5, logical block 0, async page read [ 2948.693196][T27916] Buffer I/O error on dev loop5, logical block 0, async page read [ 2948.696663][T27916] Buffer I/O error on dev loop5, logical block 0, async page read [ 2948.705033][T27916] Buffer I/O error on dev loop5, logical block 0, async page read [ 2948.708459][T27916] Buffer I/O error on dev loop5, logical block 0, async page read [ 2948.711804][T27916] Buffer I/O error on dev loop5, logical block 0, async page read [ 2948.743025][T27916] loop5: unable to read partition table [ 2948.748547][T28051] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2948.753059][T28050] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2948.762529][T28050] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 2948.775892][T28050] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 2948.837734][T28050] ldm_validate_partition_table(): Disk read failed. [ 2948.840221][T28050] Dev loop5: unable to read RDB block 0 [ 2948.842393][T28050] loop5: unable to read partition table [ 2948.850277][T28050] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 2949.097749][T28065] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2950.092155][T28096] input: syz1 as /devices/virtual/input/input504 [ 2950.146230][T28097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15334'. [ 2951.014134][T28104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15338'. [ 2951.017933][T28104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15338'. [ 2951.729088][T28123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15343'. [ 2951.769043][ T7525] usb 42-1: device descriptor read/8, error -110 [ 2952.067580][T28133] input: syz1 as /devices/virtual/input/input506 [ 2952.117525][T28135] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2952.120054][T28135] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2952.122948][T28135] vhci_hcd vhci_hcd.0: Device attached [ 2952.288624][T28136] vhci_hcd: connection closed [ 2952.289101][T19344] vhci_hcd vhci_hcd.2: stop threads [ 2952.292479][T19344] vhci_hcd vhci_hcd.2: release socket [ 2952.294935][T19344] vhci_hcd vhci_hcd.2: disconnect device [ 2953.788038][T28181] input: syz1 as /devices/virtual/input/input507 [ 2954.379685][T28190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15359'. [ 2954.385226][T28190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15359'. [ 2955.078409][ T7558] kernel write not supported for file [eventfd] (pid: 7558 comm: kworker/3:5) [ 2955.111302][T28212] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15365'. [ 2955.274128][T28223] input: syz1 as /devices/virtual/input/input508 [ 2955.544311][T28227] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2955.546469][T28227] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2955.593367][T28227] vhci_hcd vhci_hcd.0: Device attached [ 2955.606280][T28233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15372'. [ 2955.784837][T28227] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15370'. [ 2955.897619][ T7525] usb 50-1: SetAddress Request (41) to port 0 [ 2955.912467][ T7525] usb 50-1: new SuperSpeed USB device number 41 using vhci_hcd [ 2956.496967][T28260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15378'. [ 2956.500602][T28260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15378'. [ 2956.763352][T28229] vhci_hcd: connection reset by peer [ 2956.766708][ T3704] vhci_hcd vhci_hcd.6: stop threads [ 2956.769131][ T3704] vhci_hcd vhci_hcd.6: release socket [ 2956.771409][ T3704] vhci_hcd vhci_hcd.6: disconnect device [ 2957.886216][T28312] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15386'. [ 2958.063109][T26387] usb 11-1: new high-speed USB device number 53 using dummy_hcd [ 2958.214697][T26387] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 2958.217287][T26387] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2958.220413][T26387] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2958.247074][T26387] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2958.253019][T26387] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2958.259973][T26387] usb 11-1: Product: syz [ 2958.261387][T26387] usb 11-1: Manufacturer: syz [ 2958.263804][T26387] usb 11-1: SerialNumber: syz [ 2958.267907][T26387] usb 11-1: config 0 descriptor?? [ 2958.277097][T26387] hub 11-1:0.0: bad descriptor, ignoring hub [ 2958.279073][T26387] hub 11-1:0.0: probe with driver hub failed with error -5 [ 2958.287958][T26387] usb 11-1: selecting invalid altsetting 0 [ 2958.445677][T28340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15394'. [ 2958.449521][T28340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15394'. [ 2958.626261][ T7558] usb 11-1: USB disconnect, device number 53 [ 2958.824467][T28362] input: syz1 as /devices/virtual/input/input509 [ 2959.497526][T28387] siw: device registration error -23 [ 2960.487108][T28409] input: syz1 as /devices/virtual/input/input510 [ 2960.575592][T28417] loop6: detected capacity change from 0 to 4095 [ 2961.034913][ T7525] usb 50-1: device descriptor read/8, error -110 [ 2961.163783][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15405'. [ 2961.446303][ T7525] usb usb50-port1: attempt power cycle [ 2961.956204][ T40] audit: type=1326 audit(3219.027:103149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28469 comm="syz.7.15412" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cd579 code=0x0 [ 2962.154062][ T7525] usb usb50-port1: unable to enumerate USB device [ 2962.352227][T28492] batman_adv: batadv0: Adding interface: gretap1 [ 2962.354497][T28492] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2962.366993][T28492] batman_adv: batadv0: Interface activated: gretap1 [ 2962.383207][T28492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2962.464192][T28502] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2962.466405][T28502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2962.482570][T28502] vhci_hcd vhci_hcd.0: Device attached [ 2962.573670][T28513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15419'. [ 2962.594419][T28512] input: syz1 as /devices/virtual/input/input511 [ 2962.763195][T14345] usb 40-1: SetAddress Request (95) to port 0 [ 2962.765175][T14345] usb 40-1: new SuperSpeed USB device number 95 using vhci_hcd [ 2962.796363][T28504] vhci_hcd: connection reset by peer [ 2962.799180][ T8734] vhci_hcd vhci_hcd.1: stop threads [ 2962.801589][ T8734] vhci_hcd vhci_hcd.1: release socket [ 2962.804969][ T8734] vhci_hcd vhci_hcd.1: disconnect device [ 2963.348054][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2964.111568][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15424'. [ 2965.906890][T28611] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2965.911711][T28591] input: syz1 as /devices/virtual/input/input512 [ 2966.214498][T28632] input: syz1 as /devices/virtual/input/input513 [ 2966.389934][ T40] audit: type=1326 audit(3223.457:103150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.6.15437" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2579 code=0x0 [ 2966.611460][T28654] input: syz1 as /devices/virtual/input/input514 [ 2966.872285][T28656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15435'. [ 2967.855297][T14345] usb 40-1: device descriptor read/8, error -110 [ 2968.083267][T28656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2968.559587][T14345] usb usb40-port1: attempt power cycle [ 2968.725815][T28665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15441'. [ 2968.738430][T28665] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15441'. [ 2969.248613][T14345] usb usb40-port1: unable to enumerate USB device [ 2971.070115][T28765] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15450'. [ 2971.092048][T28762] input: syz1 as /devices/virtual/input/input515 [ 2972.506441][T28784] input: syz1 as /devices/virtual/input/input516 [ 2972.606932][T28792] input: syz1 as /devices/virtual/input/input517 [ 2973.904444][T28800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2974.605910][T28831] input: syz1 as /devices/virtual/input/input518 [ 2975.527681][T28839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15464'. [ 2975.531936][T28839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15464'. [ 2976.962438][T28871] alle: renamed from bridge_slave_0 (while UP) [ 2977.578280][T28876] 9p: Bad value for 'wfdno' [ 2977.947440][T28881] input: syz1 as /devices/virtual/input/input519 [ 2978.552788][T28886] input: syz1 as /devices/virtual/input/input520 [ 2981.039756][T28921] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2981.277867][T28932] netlink: 'syz.7.15488': attribute type 13 has an invalid length. [ 2981.643859][T28932] genirq: Flags mismatch irq 31. 00200000 (eth1-tx-0) vs. 00200000 (comedi_parport) [ 2981.651357][T28917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2981.656627][T28932] ------------[ cut here ]------------ [ 2981.661765][T28932] remove_proc_entry: removing non-empty directory 'irq/30', leaking at least 'eth1-rx-0' [ 2981.665286][T28932] WARNING: fs/proc/generic.c:742 at remove_proc_entry+0x4b1/0x5b0, CPU#3: syz.7.15488/28932 [ 2981.668978][T28932] Modules linked in: [ 2981.671623][T28932] CPU: 3 UID: 0 PID: 28932 Comm: syz.7.15488 Tainted: G L syzkaller #0 PREEMPT(full) [ 2981.675874][T28932] Tainted: [L]=SOFTLOCKUP [ 2981.677613][T28932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2981.684821][T28932] RIP: 0010:remove_proc_entry+0x4c5/0x5b0 [ 2981.686732][T28932] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 b3 00 00 00 48 8d 3d bf 64 0e 0e 48 8b 93 d0 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 40 c2 a8 8b <67> 48 0f b9 3a e9 5a fe ff ff e8 9c 2a 57 ff 48 8d 7d 18 48 b8 00 [ 2981.692958][T28932] RSP: 0000:ffffc9000c5de850 EFLAGS: 00010246 [ 2981.694930][T28932] RAX: dffffc0000000000 RBX: ffff88801c708140 RCX: ffff888049b04d5c [ 2981.697434][T28932] RDX: ffff88801c70821c RSI: ffffffff8ba8c240 RDI: ffffffff90bd8480 [ 2981.699957][T28932] RBP: ffff888049b04d38 R08: ffff88806c8ca0dc R09: ffffed1009360993 [ 2981.702513][T28932] R10: ffff888049b04c9b R11: 0000000000000000 R12: ffff888049b04c80 [ 2981.705060][T28932] R13: ffff888049b04d5c R14: ffff88806c8ca0dc R15: dffffc0000000000 [ 2981.708053][T28932] FS: 0000000000000000(0000) GS:ffff8880976e3000(0063) knlGS:00000000f53f6b40 [ 2981.711191][T28932] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2981.713734][T28932] CR2: 00000000f7246d10 CR3: 000000005def7000 CR4: 0000000000352ef0 [ 2981.716660][T28932] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2981.719210][T28932] DR3: 0400000000000e0b DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2981.721758][T28932] Call Trace: [ 2981.723074][T28932] [ 2981.724071][T28932] ? __pfx_remove_proc_entry+0x10/0x10 [ 2981.725823][T28932] ? mtree_load+0x32d/0xa40 [ 2981.727389][T28932] ? __pfx_mtree_load+0x10/0x10 [ 2981.728977][T28932] unregister_irq_proc+0x200/0x2a0 [ 2981.730881][T28932] ? __pfx_unregister_irq_proc+0x10/0x10 [ 2981.733232][T28932] free_desc+0x8a/0x190 [ 2981.734617][T28932] ? __pfx_free_desc+0x10/0x10 [ 2981.736178][T28932] ? kfree+0x1c7/0x690 [ 2981.737485][T28932] irq_free_descs+0x84/0xe0 [ 2981.738925][T28932] irq_domain_free_irqs+0x46f/0x5c0 [ 2981.740583][T28932] msi_domain_free_locked.part.0+0x524/0x6b0 [ 2981.742533][T28932] ? __pfx_msi_domain_free_locked.part.0+0x10/0x10 [ 2981.744654][T28932] ? msi_get_device_domain+0x115/0x1f0 [ 2981.746877][T28932] msi_domain_free_irqs_all_locked+0x11d/0x170 [ 2981.749261][T28932] ? __pfx_msi_domain_free_irqs_all_locked+0x10/0x10 [ 2981.751581][T28932] ? pci_msix_shutdown+0x3a3/0x500 [ 2981.753431][T28932] ? __pfx_pci_msix_shutdown+0x10/0x10 [ 2981.755329][T28932] pci_msi_teardown_msi_irqs+0xb3/0xd0 [ 2981.757095][T28932] pci_free_msi_irqs+0x1f/0xa0 [ 2981.758667][T28932] pci_disable_msix+0xda/0x130 [ 2981.760346][T28932] e1000_request_irq+0x473/0xdc0 [ 2981.762474][T28932] e1000e_open+0x471/0x1800 [ 2981.763958][T28932] ? ip6_route_dev_notify+0xe4/0x750 [ 2981.765582][T28932] ? ndisc_netdev_event+0xa1/0x560 [ 2981.767206][T28932] ? __pfx_e1000e_open+0x10/0x10 [ 2981.769609][T28932] ? __pfx_e1000e_open+0x10/0x10 [ 2981.771609][T28932] __dev_open+0x3ad/0x960 [ 2981.773344][T28932] ? __pfx___dev_open+0x10/0x10 [ 2981.774809][T28932] ? __local_bh_enable_ip+0x9e/0x120 [ 2981.776333][T28932] __dev_change_flags+0x558/0x6f0 [ 2981.777918][T28932] ? __pfx___dev_change_flags+0x10/0x10 [ 2981.779641][T28932] ? validate_linkmsg+0x57c/0xba0 [ 2981.781247][T28932] ? __pfx_netif_state_change+0x10/0x10 [ 2981.783130][T28932] ? __pfx_validate_linkmsg+0x10/0x10 [ 2981.784760][T28932] netif_change_flags+0x8d/0x160 [ 2981.786366][T28932] do_setlink.isra.0+0x1abb/0x3e50 [ 2981.787991][T28932] ? preempt_schedule_common+0x42/0xc0 [ 2981.789625][T28932] ? preempt_schedule_thunk+0x16/0x30 [ 2981.791262][T28932] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 2981.792978][T28932] ? __lock_acquire+0x4a5/0x2630 [ 2981.794584][T28932] ? __pfx_vprintk_emit+0x10/0x10 [ 2981.796152][T28932] ? find_held_lock+0x2b/0x80 [ 2981.797705][T28932] ? ___ratelimit+0x706/0xa90 [ 2981.799325][T28932] ? lock_acquire+0x17c/0x330 [ 2981.800788][T28932] ? __pfx___might_resched+0x10/0x10 [ 2981.802981][T28932] ? rcu_is_watching+0x12/0xc0 [ 2981.804517][T28932] ? trace_contention_end+0xd6/0x110 [ 2981.806227][T28932] ? __mutex_lock+0x26a/0x1b90 [ 2981.807789][T28932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2981.809786][T28932] ? rtnl_newlink+0x8bb/0x2380 [ 2981.811343][T28932] ? __nla_validate_parse+0x1e7/0x28b0 [ 2981.813178][T28932] ? __pfx___mutex_lock+0x10/0x10 [ 2981.814780][T28932] ? apparmor_capable+0x1d7/0x4e0 [ 2981.816360][T28932] rtnl_newlink+0x1b79/0x2380 [ 2981.818328][T28932] ? __pfx_rtnl_newlink+0x10/0x10 [ 2981.819895][T28932] ? kasan_quarantine_put+0x104/0x240 [ 2981.821587][T28932] ? lockdep_hardirqs_on+0x78/0x100 [ 2981.823297][T28932] ? kmem_cache_free+0x143/0x720 [ 2981.824871][T28932] ? sk_tx_queue_get+0x119/0x270 [ 2981.826520][T28932] ? __lock_acquire+0x4a5/0x2630 [ 2981.828135][T28932] ? consume_skb+0xd6/0x110 [ 2981.829585][T28932] ? find_held_lock+0x2b/0x80 [ 2981.831112][T28932] ? find_held_lock+0x2b/0x80 [ 2981.832650][T28932] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2981.834493][T28932] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2981.836082][T28932] ? __pfx_rtnl_newlink+0x10/0x10 [ 2981.837639][T28932] rtnetlink_rcv_msg+0x95e/0xe90 [ 2981.839244][T28932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2981.840951][T28932] ? ref_tracker_free+0x37e/0x6c0 [ 2981.842527][T28932] netlink_rcv_skb+0x159/0x420 [ 2981.844135][T28932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2981.845873][T28932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2981.847541][T28932] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2981.849204][T28932] netlink_unicast+0x5aa/0x870 [ 2981.850790][T28932] ? __pfx_netlink_unicast+0x10/0x10 [ 2981.852590][T28932] netlink_sendmsg+0x8b0/0xda0 [ 2981.854341][T28932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2981.856028][T28932] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2981.857757][T28932] ____sys_sendmsg+0xa54/0xc30 [ 2981.859308][T28932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2981.860983][T28932] ? __pfx_futex_wake_mark+0x10/0x10 [ 2981.862692][T28932] ___sys_sendmsg+0x190/0x1e0 [ 2981.864204][T28932] ? __pfx____sys_sendmsg+0x10/0x10 [ 2981.865878][T28932] __sys_sendmsg+0x170/0x220 [ 2981.867395][T28932] ? __pfx___sys_sendmsg+0x10/0x10 [ 2981.868992][T28932] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 2981.870792][T28932] __do_fast_syscall_32+0xde/0x660 [ 2981.872394][T28932] do_fast_syscall_32+0x32/0x70 [ 2981.874022][T28932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2981.876114][T28932] RIP: 0023:0xf73cd579 [ 2981.877770][T28932] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 2981.883983][T28932] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2981.886685][T28932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2981.889213][T28932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2981.891737][T28932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2981.894251][T28932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2981.896820][T28932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2981.899371][T28932] [ 2981.900387][T28932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2981.902726][T28932] CPU: 3 UID: 0 PID: 28932 Comm: syz.7.15488 Tainted: G L syzkaller #0 PREEMPT(full) [ 2981.906435][T28932] Tainted: [L]=SOFTLOCKUP [ 2981.907820][T28932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2981.911017][T28932] Call Trace: [ 2981.912212][T28932] [ 2981.913187][T28932] dump_stack_lvl+0x100/0x190 [ 2981.914737][T28932] vpanic+0x20d/0x630 [ 2981.916018][T28932] panic+0xd1/0xd1 [ 2981.917231][T28932] ? __pfx_panic+0x10/0x10 [ 2981.918714][T28932] check_panic_on_warn.cold+0x19/0x34 [ 2981.920445][T28932] ? remove_proc_entry+0x4b1/0x5b0 [ 2981.922127][T28932] __warn.cold+0x191/0x2f8 [ 2981.923575][T28932] __report_bug+0x296/0x3d0 [ 2981.925036][T28932] ? remove_proc_entry+0x4b1/0x5b0 [ 2981.926713][T28932] ? __pfx___report_bug+0x10/0x10 [ 2981.928332][T28932] ? do_raw_spin_lock+0x128/0x260 [ 2981.929950][T28932] ? find_held_lock+0x2b/0x80 [ 2981.931502][T28932] ? proc_entry_rundown+0x158/0x1e0 [ 2981.933146][T28932] ? proc_entry_rundown+0x158/0x1e0 [ 2981.934832][T28932] report_bug_entry+0xe1/0x290 [ 2981.936404][T28932] ? remove_proc_entry+0x4c5/0x5b0 [ 2981.938086][T28932] handle_bug+0x1c9/0x2a0 [ 2981.939529][T28932] exc_invalid_op+0x17/0x50 [ 2981.941022][T28932] asm_exc_invalid_op+0x1a/0x20 [ 2981.942633][T28932] RIP: 0010:remove_proc_entry+0x4c5/0x5b0 [ 2981.944470][T28932] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 b3 00 00 00 48 8d 3d bf 64 0e 0e 48 8b 93 d0 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 40 c2 a8 8b <67> 48 0f b9 3a e9 5a fe ff ff e8 9c 2a 57 ff 48 8d 7d 18 48 b8 00 [ 2981.950654][T28932] RSP: 0000:ffffc9000c5de850 EFLAGS: 00010246 [ 2981.952641][T28932] RAX: dffffc0000000000 RBX: ffff88801c708140 RCX: ffff888049b04d5c [ 2981.955079][T28932] RDX: ffff88801c70821c RSI: ffffffff8ba8c240 RDI: ffffffff90bd8480 [ 2981.957677][T28932] RBP: ffff888049b04d38 R08: ffff88806c8ca0dc R09: ffffed1009360993 [ 2981.960242][T28932] R10: ffff888049b04c9b R11: 0000000000000000 R12: ffff888049b04c80 [ 2981.962896][T28932] R13: ffff888049b04d5c R14: ffff88806c8ca0dc R15: dffffc0000000000 [ 2981.965477][T28932] ? __pfx_remove_proc_entry+0x10/0x10 [ 2981.967260][T28932] ? mtree_load+0x32d/0xa40 [ 2981.968714][T28932] ? __pfx_mtree_load+0x10/0x10 [ 2981.970330][T28932] unregister_irq_proc+0x200/0x2a0 [ 2981.972018][T28932] ? __pfx_unregister_irq_proc+0x10/0x10 [ 2981.973863][T28932] free_desc+0x8a/0x190 [ 2981.975189][T28932] ? __pfx_free_desc+0x10/0x10 [ 2981.976798][T28932] ? kfree+0x1c7/0x690 [ 2981.978154][T28932] irq_free_descs+0x84/0xe0 [ 2981.979653][T28932] irq_domain_free_irqs+0x46f/0x5c0 [ 2981.981384][T28932] msi_domain_free_locked.part.0+0x524/0x6b0 [ 2981.983356][T28932] ? __pfx_msi_domain_free_locked.part.0+0x10/0x10 [ 2981.985463][T28932] ? msi_get_device_domain+0x115/0x1f0 [ 2981.987287][T28932] msi_domain_free_irqs_all_locked+0x11d/0x170 [ 2981.989266][T28932] ? __pfx_msi_domain_free_irqs_all_locked+0x10/0x10 [ 2981.991394][T28932] ? pci_msix_shutdown+0x3a3/0x500 [ 2981.993040][T28932] ? __pfx_pci_msix_shutdown+0x10/0x10 [ 2981.994740][T28932] pci_msi_teardown_msi_irqs+0xb3/0xd0 [ 2981.996463][T28932] pci_free_msi_irqs+0x1f/0xa0 [ 2981.998022][T28932] pci_disable_msix+0xda/0x130 [ 2981.999575][T28932] e1000_request_irq+0x473/0xdc0 [ 2982.001191][T28932] e1000e_open+0x471/0x1800 [ 2982.002685][T28932] ? ip6_route_dev_notify+0xe4/0x750 [ 2982.004419][T28932] ? ndisc_netdev_event+0xa1/0x560 [ 2982.006118][T28932] ? __pfx_e1000e_open+0x10/0x10 [ 2982.007724][T28932] ? __pfx_e1000e_open+0x10/0x10 [ 2982.009331][T28932] __dev_open+0x3ad/0x960 [ 2982.010748][T28932] ? __pfx___dev_open+0x10/0x10 [ 2982.012338][T28932] ? __local_bh_enable_ip+0x9e/0x120 [ 2982.014092][T28932] __dev_change_flags+0x558/0x6f0 [ 2982.016015][T28932] ? __pfx___dev_change_flags+0x10/0x10 [ 2982.017825][T28932] ? validate_linkmsg+0x57c/0xba0 [ 2982.019488][T28932] ? __pfx_netif_state_change+0x10/0x10 [ 2982.021372][T28932] ? __pfx_validate_linkmsg+0x10/0x10 [ 2982.023121][T28932] netif_change_flags+0x8d/0x160 [ 2982.024744][T28932] do_setlink.isra.0+0x1abb/0x3e50 [ 2982.026534][T28932] ? preempt_schedule_common+0x42/0xc0 [ 2982.028285][T28932] ? preempt_schedule_thunk+0x16/0x30 [ 2982.030019][T28932] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 2982.031820][T28932] ? __lock_acquire+0x4a5/0x2630 [ 2982.033435][T28932] ? __pfx_vprintk_emit+0x10/0x10 [ 2982.035189][T28932] ? find_held_lock+0x2b/0x80 [ 2982.036838][T28932] ? ___ratelimit+0x706/0xa90 [ 2982.038621][T28932] ? lock_acquire+0x17c/0x330 [ 2982.040271][T28932] ? __pfx___might_resched+0x10/0x10 [ 2982.042094][T28932] ? rcu_is_watching+0x12/0xc0 [ 2982.043617][T28932] ? trace_contention_end+0xd6/0x110 [ 2982.045320][T28932] ? __mutex_lock+0x26a/0x1b90 [ 2982.046893][T28932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2982.048755][T28932] ? rtnl_newlink+0x8bb/0x2380 [ 2982.050339][T28932] ? __nla_validate_parse+0x1e7/0x28b0 [ 2982.052417][T28932] ? __pfx___mutex_lock+0x10/0x10 [ 2982.054402][T28932] ? apparmor_capable+0x1d7/0x4e0 [ 2982.056483][T28932] rtnl_newlink+0x1b79/0x2380 [ 2982.058430][T28932] ? __pfx_rtnl_newlink+0x10/0x10 [ 2982.060067][T28932] ? kasan_quarantine_put+0x104/0x240 [ 2982.061734][T28932] ? lockdep_hardirqs_on+0x78/0x100 [ 2982.063372][T28932] ? kmem_cache_free+0x143/0x720 [ 2982.064921][T28932] ? sk_tx_queue_get+0x119/0x270 [ 2982.066530][T28932] ? __lock_acquire+0x4a5/0x2630 [ 2982.068076][T28932] ? consume_skb+0xd6/0x110 [ 2982.069508][T28932] ? find_held_lock+0x2b/0x80 [ 2982.070988][T28932] ? find_held_lock+0x2b/0x80 [ 2982.072546][T28932] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2982.074207][T28932] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2982.075868][T28932] ? __pfx_rtnl_newlink+0x10/0x10 [ 2982.077470][T28932] rtnetlink_rcv_msg+0x95e/0xe90 [ 2982.079058][T28932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2982.080783][T28932] ? ref_tracker_free+0x37e/0x6c0 [ 2982.082419][T28932] netlink_rcv_skb+0x159/0x420 [ 2982.083958][T28932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2982.085723][T28932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2982.087415][T28932] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2982.089322][T28932] netlink_unicast+0x5aa/0x870 [ 2982.091336][T28932] ? __pfx_netlink_unicast+0x10/0x10 [ 2982.093530][T28932] netlink_sendmsg+0x8b0/0xda0 [ 2982.095588][T28932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2982.097757][T28932] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2982.100062][T28932] ____sys_sendmsg+0xa54/0xc30 [ 2982.102078][T28932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2982.104252][T28932] ? __pfx_futex_wake_mark+0x10/0x10 [ 2982.106453][T28932] ___sys_sendmsg+0x190/0x1e0 [ 2982.108513][T28932] ? __pfx____sys_sendmsg+0x10/0x10 [ 2982.110833][T28932] __sys_sendmsg+0x170/0x220 [ 2982.112867][T28932] ? __pfx___sys_sendmsg+0x10/0x10 [ 2982.115142][T28932] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 2982.117580][T28932] __do_fast_syscall_32+0xde/0x660 [ 2982.119820][T28932] do_fast_syscall_32+0x32/0x70 [ 2982.122009][T28932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2982.124793][T28932] RIP: 0023:0xf73cd579 [ 2982.126602][T28932] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 2982.134835][T28932] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2982.138392][T28932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2982.141771][T28932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2982.145110][T28932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2982.148492][T28932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2982.151921][T28932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2982.154985][T28932] [ 2982.156993][T28932] Kernel Offset: disabled [ 2982.158775][T28932] Rebooting in 86400 seconds..